CVE-2019-9053

CVE 2019-9053 Detail Description This code is an implementation of a Time-Based Blind SQL Injection attack in Python 3. The attack is designed to exploit a SQL injection vulnerability in a Content Management System CMS Made Simple 2.2.8 through an HTTP request. Exploit Use: exploit.py -u...

Chrome-and-Edge-Version-Dumper

Chrome-and-Edge-Version-Dumper CVE-2022-1096 により更新が必要かどうかを判断するために、Chrome と Edge のバージョンをテキスト ファイルにダンプする Powershell スクリプトです。 使用前にパスを編集し、出力を保存するフォルダーを作成してください。...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

Xerror

Xerror Xerror is an automated penetration tool , which will help security professionals and non professionals to automate their pentesting tasks. Xerror will perform all tests and, at the end generate two reports for executives and analysts. Xerror provides GUI easy to use menu driven...

linux-4.19.72_CVE-2023-0386

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...

houndsploit

HoundSploit Author: Nicolas Carolo [email protected] Copyright: © 2021, Nicolas Carolo. Date: 2021-11-26 Version: 2.8.0 PURPOSE HoundSploit is an advanced search engine for Exploit-DB developed in Python using Flask as micro web framework, born with the aim of showing the user the most...

cybersecurity-struts2

Apache Struts2 脆弱性 | CVE-2017-5638 | バージョン 2.5 免責事項 これは教育および研究目的のみに使用されるものです。このプロジェクトの内容や情報の違法または非倫理的な使用を許可または推奨するものではありません。 手順 Webアプリを実行するには: java -jar ms-cybersecurity-1.jar 組み込みTomcatを使用 Java 1.8 デフォルトではポート8080で起動します http://localhost:8080/MSCybersecurity コマンド送信にはコマンドラインエミュレータ Send.jar プロジェクト...

nlist

nList 各種ツールで使用するためのターゲットリストを生成するNmapスクリプトです。 インストール このスクリプトをすべてのスクリプトスキャン（-sC）の一部としてデフォルトで実行するには、Nmapデータディレクトリのscriptsサブディレクトリにnlist.confファイルと一緒に保存する必要があります。 ユーザーのホームディレクトリに配置された.nlistファイルは、nlist.config引数で別の設定ファイルが指定されていない場合、デフォルトのnlist.confファイルの代わりに使用されます。 使用方法 バージョンスキャン（-sV）の一部として実行すると最も効果的です。...

CVE-2020-14066

Icewarp Email Server 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...

nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...

-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4

WordPress N-Media Website Contact Form with File Uploader ファイルアップロード脆弱性分析 1. 脆弱性箇所のコード解析 プラグインファイル：classes/plugin.class.php、メソッド：uploadfile function uploadfile // ... if ! empty $FILES $tempFile = $FILES 'Filedata' 'tmpname'; $targetPath = $dirPath; $newfilename = strtotime "now" . '-'...

CVE-2017-16567

CVE-2017-16567 1. Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

CVE-2023-22515

CVE-2023-22515 漏洞利用脚本 受影响版本 8.0.0=Atlassian Confluence=8.5.1 漏洞利用 python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2019-1759-csrf-js-rce

CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce 观看视频...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Edited version of the original exploit: https://www.exploit-db.com/exploits/45233 Converted to Python3 Added username wordlist option How To Run Install the requirements: foo@bar:$ pip3 install -r requirements.txt For single username...

Exploit-CVE-2025-24801

CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...

CVE-2023-47437

CVE-2023-47437 Pachno Stored Cross-Site Scripting Vulnerability https://vulners.com/cve/CVE-2023-47437 Description: A vulnerability has been identified in Pachno allowing an authenticated attacker to execute a stored cross-site scripting XSS attack. Vulnerable forms: Comments Affected Versions:...