CVE-2022-24124

POC for CVE-2022-24124 Exploit Code for CVE-2022-24124 aka Casdoor SQL Injection Exploit Links: ExploitDB-50792 PacketStormSecurity Expected outcome: Dump SQL database version on host running Casdoor 1.13.1 Intended only for educational and testing in corporate environments. Exploit Usage...

check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner This scanner will recursively scan paths including archives for vulnerable log4j versions and org/apache/logging/log4j/core/lookup/JndiLookup.class files. Currently the allow list defines non exploitable versions, in this case log4j-core 2.17.0 and 2.12.3. Features...

CVE-2018-12613-phpMyAdmin

CVE-2018-12613-phpMyAdmin This article will share a file inclusion vulnerability in phpMyAdmin version 4.8.1, explaining from configuration to principle, and then to vulnerability reproduction. More importantly, it helps everyone understand the knowledge behind these real vulnerabilities. A basic...

proxy

git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...

Linux-4.19.72_CVE-2020-24490

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2022-31299

CVE-2022-31299 Haraj Script 3.7 - Reflected XSS Exploit Title: Haraj Script 3.7 - Reflected XSS Date: 2022-06-13 CVE: CVE-2022-31299 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7 Tested on: LAMP, Ubuntu...

CVE-2021-27513

CVE-2021-27513 ITSMBrokencontrol Exploit Title: EyesOfNetwork 5.3 - File Upload Remote Code Execution Date: 10/01/2021 Exploit Author: Ariane.Blow Vendor Homepage: https://www.eyesofnetwork.com/en Software Link: http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x8664-bin.iso Version: 5.3-10...

CVE-2011-2523-PoC

vsftpd2.3.4 Simple exploit made in Python that exploits the vsftpd 2.3.4 vulnerability Usage: python3 ftpxploit.py 127.0.0.1...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...

CVE-2022-28078

CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Exploit Title: Home Owners Collection Management System 1.0 - Reflected XSS Date: 2022-05-06 CVE: CVE-2022-28078 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

linux-4.19.72_CVE-2023-0386

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

OpenSSH-Vulnerability-test

OpenSSH CVE-2024-6387 Vulnerability Checker Overview This C program scans specified IP addresses or network ranges to check if the servers are running a potentially vulnerable version of OpenSSH. It checks if the SSH port default is 22 is open, retrieves the SSH banner, and determines if the serv...

Check-CVE-2021-23383

Check-CVE-2021-23383 Check the conditions for exploiting CVE-2021-23383 through the handlebars library version assessment...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

kalimux

ABOUT TOOL : Kalimux is a bash based script which automatically installs kali linux in termux without any issue and without root. This tool works on both rooted Android device and Non-rooted Android device. AVAILABLE ON : Termux TESTED ON : Termux REQUIREMENTS : internet 1GB storage storage 400 M...

CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping, eCommerce shopping cart - Stored Cross-Site Scripting Vulnerability in 'Address' Date 2021-02-11 Exploit Author Anmol K Sachan Vendor Homepage https://www.peel.fr/ Software Link https://www.peel.fr/nos-offres-1/peel-shopping-31.html...

CVE-2021-3572

CVE-2021-3572 This repository is designed for testing CVE-2021-3572 in pypa/pip. For more information, see these resources: CVE page: https://vulners.com/cve/CVE-2021-3572 PR where vulnerability was fixed: https://github.com/pypa/pip/pull/9827 Issue with more discussion:...

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...