122853 matches found
CVE-2025-68147-OSPOS-Stored-XSS
CVE-2025-68147: Stored Cross-Site Scripting XSS in OpenSourcePOS Metadata| Details ---|--- CVE ID| CVE-2025-68147 Severity| High CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N Vulnerability Type| Stored Cross-Site Scripting CWE-79 Affected Versions| OpenSourcePOS v3.4.0, v3.4.1 Patched Version|...
CVE-2023-41425
CVE-2023-41425 Description A Cross Site Scripting vulnerability in Wonder CMS Version 3.2.0 to Version 3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. This is a modifed version of the original exploit by prodigiousMind which...
CVE-2020-13942
CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...
CVE-2020-1472
CVE-2020-1472 CVE 2020-1472 Validation script Assumption: WinRM is enabled between domain controllers. Required permissions: If child domains are present: Enterprise admin If single forest, single domain: Domain admin This script must be run on a primary domain controller with required permission...
CVE-2020-3452
CVE-2020-3452 TL;DR This is an exploit for CVE-2020-3452. It's not entirely finished yet. Use it in legal context. If you fuck up it's your problem. W00t is dis? This is a quick'n dirty try to enhance the original PoC of CVE-2020-3452. At the current stage there is nothing more than a simple py...
CVE-2025-41088
CVE-2025-41088: Stored XSS in Xibo CMS I have discovered a Stored Cross-Site Scripting XSS vulnerability in Xibo CMS v4.1.2. This vulnerability allows an authenticated attacker to inject malicious scripts into the application due to improper validation of user-supplied input. The issue resides in...
oversight
Oversight v0.5.8 Oversight is a terminal-based security intelligence tool designed to audit shell scripts and commands before they touch your system. It bridges the gap between "blind trust" and "manual auditing" by providing a high-speed, interactive analysis of both local files and remote scrip...
CVE-2019-0232
CVE-2019-0232 Apache Tomcat CGIServlet enableCmdLineArguments RCE Windows batch script injection via query string arguments Description Apache Tomcat with the CGI servlet enabled and enableCmdLineArguments=true passes query string parameters as command-line arguments to CGI scripts. On Windows,...
Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46072 Exploit Title: Vehicle Service Management System - 'Service List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...
commons-text-goat
Commons-Text Goat This is a webapp that is intentionally vulnerable to CVE-2022-42889. It uses an embedded Jetty server and Maven to start a servlet listening at port 8080 at URL \api. This endpoint accepts a URL parameter cmd. This is embedded between $ and and passed to the StringSubstitutor...
pyshell2bin
pyshell2bin If you work with exploits and shellcode, you already know what shellcode is and how to deal with it. Sometimes it comes with exploits in C, Perl, Python… It usually looks like: payload = b"xbfxabxd0x9ax5bxdaxc7xd9x74x24xf4x5ax2bxc9" + "xb1x45x83xc2x04x31x7ax11x03x7ax11xe2x5ex2c" +...
log4j2_dos_exploit
Description about author: iAmSoScArEd blog: https://www.cnblogs.com/iAmSoScArEd/ github: https://github.com/iAmSOScArEd/ date: 2021-12-20 log4j2 dos exploit log4j2 dos exploit script CVE-2021-45105 Exploit CVE-2021-45105 exploit script Usage how to use English： Log4j2dos.py -u -m -d -H -l -t...
chaps
CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...
noPac-detection
About Detection script for CVE-2021-42278 and CVE-2021-42287 Usage The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h, --help show this help message...
CVE-2021-34527
CVE-2021-34527 PrintNightmare PoC 👾 📝 Description This simple Python script allows you to send a payload to a target IP address and port using the SMB protocol. It's designed to demonstrate the use of an SMB exploit payload for educational purposes. The payload is a hard-coded SMB message...
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25
Script Security Plugin User’s guide adapted from information on Template plugin in CloudBees Plugins guide Various Jenkins plugins require that users define custom scripts, most commonly in the Groovy language, to customize Jenkins’s behavior. If everyone who writes these scripts is a Jenkins...
CVE-2023-38831-WinRAR-Exploit
CVE-2023-38831-WinRAR-Exploit Proof of concept PoC exploit for WinRAR vulnerability CVE-2023-38831 vulnerability Usage: python poc.py Example: python poc.py cutepicture.jpg exploit.bat output.rar PoC Video: https://youtu.be/TRe0eGIsB5k...
Spring4Shell-CVE-2022-22965.py
Spring4Shell-CVE-2022-22965.py Script to check for Spring4Shell vulnerability Tested on https://github.com/lunasec-io/Spring4Shell-POC/blob/master/Dockerfile...
CVE-2021-3156-PATCHER
This simple bash script will patch the recently discovered sudo heap overflow vulnerability. Simply run git clone https://github.com/elbee-cyber/CVE-2021-3156-PATCHER && cd CVE-2021-3156-PATCHER && sh CVE-2021-3156-patcher.sh This patch is significantly important for any nix systems. Neglecting...