CVE-2022-31300

CVE-2022-31300 Haraj Script 3.7 - DM Section Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31300 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...

wp_bookingpress_1.0.11

CVE-2022-0739 CVE-2022-0739 Wordpress BookingPress Plugin 1.0.11 Unauthenticated SQL Injection Getting Started Executing program With python3 python3 sqli.py -u 'http://wordpress.site' -p 'wpnoncevalue' Help For help menu: python3 sqli.py -h Disclaimer All the code provided on this repository is...

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

Authenticated PRTG network Monitor remote code execution Based on https://www.exploit-db.com/exploits/46527 Usage: simply manually edit the script to include your Target URL, admin username and password like so: TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin2019" Then insert...

CVE-2022-31297

CVE-2022-31297 Haraj Script 3.7 - Reflected XSS Exploit Title: Haraj Script 3.7 - Reflected XSS Date: 2022-06-13 CVE: CVE-2022-31297 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7 Tested on: LAMP, Ubuntu...

CVE-2023-38408

CVE-2023-38408 PoC for the recent critical vuln affecting OpenSSH versions 9.3p2 Designed to work seamlessly with TryHackMe's free access lab environment covering this vuln. https://tryhackme.com/room/cve202338408 NOTE: This will not work outside the THM Lab environment...

CVE-2025-24587

CVE-2025-24587 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Email Subscription Popup Vulnerable version = 1.2.23 Component slug email-subscribe Component link https://wordpress.org/plugins/email-subscribe/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: Injection...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

cve-2022-42889-text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

CVE-2023-23396

CVE-2023-23396 Here you can download the exploit. Here you can read my report. Here you can buy me a unicorn 🦄 PS At the time of writing 2023-04-07 the client version of Microsoft Excel is still vulnerable here's more information. Share the Knowledge!...

vulscan

vulscan - Nmapを使用した脆弱性スキャン 概要 Vulscanは、nmapを脆弱性スキャナーに拡張するモジュールです。nmapオプション -sV はサービスごとのバージョン検出を有効にし、特定された製品に応じた潜在的な欠陥を特定するために使用されます。データはオフラインバージョンのVulDBで検索されます。 インストール 以下のNmapインストールのフォルダにファイルをインストールしてください： Nmap\scripts\vulscan\ 以下のようにGitHubリポジトリをクローンします： git clone https://github.com/scipag/vulsca...

vulscan

vulscan - Vulnerability Scanning with Nmap Introduction Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline...

Wagtail-CMS-XSS

Wagtail-6.4.1-CMS-XSS CVE-2025-45388 Wagtail CMS 6.4.1 Stored XSS CMS Stored XSS Vulnerability PoC Overview This repository demonstrates a Stored XSS vulnerability found in the Wagtail 6.4.1 CMS platform. A malicious JavaScript is embedded in a PDF file, and every time a user clicks on the PDF, a...

CVE-2024-55060

CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting XSS Exploit Title: Rafed CMS Website v1.44 - Cross Site Scripting XSS Date: 2024-03-12 CVE: CVE-2024-55060 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.rafed-system.org/ Software Link: N/A Version: 1.44 Tested on...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting access control flaw CWE-284. Description The CVE-2021-24006 vulnerability affects FortiManager versions 6.4....

xuxueli__xxl-job_CVE-2020-29204_2-2-0

XXL-JOB XXL-JOB, a distributed task scheduling framework. -- Home Page -- Introduction XXL-JOB is a distributed task scheduling framework. It's core design goal is to deve...

CVE-2020-9483

CVE-2020-9483 PoC of SQL Injection vulCVE-2020-9483,Apache SkyWalking Usage:python3 CVE-2020-9483.py -ip 127.0.0.1 You can use this script to get Database version by SQL Injection Click star if you like this script 如果觉得这个PoC帮助了你，希望能点个star Result： XD...

apache__jspwiki_CVE-2019-0225_2-11-0-M2

Apache JSPWiki 2.11 - ドキュメンテーション Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 Unauthenticated Remote Code Execution Uses Python 3 Running without Docker: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py Running with Docker:...

cve-2025-50428

CVE-2025-50428 - RaspAP コマンドインジェクション CVE-2025-50428 の概念実証エクスプロイトです。RaspAP の raspap-webgui 3.2.9 以前に存在するコマンドインジェクションの脆弱性を悪用します。 脆弱性 ID| CVE-2025-50428 ---|--- 深刻度| 高 CVSS 3.1: 8.6 CVSS ベクター| CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 脆弱性タイプ| コードインジェクション 攻撃経路| リモート（認証済み） 必要な権限|...