Jorani 1.0.0 - Remote Code Execution

Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server. id: CVE-2023-26469 info: name: Jorani 1.0.0 - Remote Code Execution author: pussycat0x severity: critical description: | Jorani 1.0.0, an attacker could leverage path traversal to access files...

letsploit

letsploit letsploit is a tool that detects the patch level of the local or another windows 10 system, checks it against the latest available patches and finds potential cve vulnerabilities as well as publicly available exploit code. Inspired by following projects 1. bitsadmin's WESNG...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

ClientInspectorV2

Introduction to ClientInspector v2 Are you in control? - or are some of your core infrastructure processes like patching, antivirus, bitlocker enablement drifting? Or would you like to do advanced inventory , where you can lookup your warranty state against Lenovo or Dell warranty, then keep...

snyk-js-jquery-565129

This repository contains the patches for CVE-2020-11022 and CVE-2020-11023 which affect all jQuery versions prior 3.5.0, including the patches from DanielRuf/snyk-js-jquery-174006. These patches were generated with diff -u original patched patchfile. Apply the patches You can apply the patches wi...

snyk-js-jquery-174006

This repository contains the patches for CVE-2019-11358 - prototype pollution vulnerability which affects all jQuery versions prior 3.4.0. These patches were generated with diff -u original patched patchfile. Apply the patches You can apply the patches with patch, git apply, patch-package and...

Log4jPatch

-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...

CVE-2022-30190_Temporary_Fix_Source_Code

🩹CVE-2022-30190 Temporary Fix🩹 Source Code These are the source codes of two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability Follina Both can be programmed better, but this is just to implement it as quickly as possible and I did i...

Vulnerability-Management

Vulnerability Management Report Prepared for: CyberTech Solutions Prepared by: Victoria Simon Date: April 10, 2024 1. Executive Summary This report details the findings from a comprehensive vulnerability assessment conducted on CyberTech Solutions' Linux infrastructure and web applications using...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

opentsdb_key_cmd_injection

opentsdbkeycmdinjection An exploit for OpenTSDB = 2.4.1 cmd injection CVE-2023-36812/CVE-2023-25826 written in Fortran About This is an exploit for a command injection vulnerability in OpenTSDB verions 2.4.1 and prior CVE-2023-36812/CVE-2023-25826. The exploit is written in modern Fortran and...

WindowsPatchDetector

Experimental Windows .text section Patch Detector ====================== Experimental: Windows .text section compare - disk versus memory Original Idea After reading about the Skeleton Key malware http://www.secureworks.com/cyber-threat-intelligence/threats/skeleton-key-malware-analysis/ develop ...

CVE-2023-34051

CVE-2023-34051 CVE-2023-34051 is an authentication bypass that bypasses the patch for VMSA-2023-0001. VMSA-2023-0001 for vRealize Log Insight includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability CVE-2022-31706 VMware vRealize Log Insight broken access control...

CVE-2023-43208-mirth-connect-rce-poc

RCE vulnerability in Mirth Connect CVE-2023-37679 and CVE-2023-43208 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. CVE-2023-43208 is a serious security bug in NextGen Mirth Connect, a tool used by hospitals and clinics to share patient data. This bug lets hacke...

undetected-chromedriver

undetectedchromedriver https://github.com/ultrafunkamsterdam/undetected-chromedriver Optimized Selenium Chromedriver patch which does not trigger anti-bot services like Distill Network / Imperva / DataDome / Botprotect.io Automatically downloads the driver binary and patches it. Tested until...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG es una herramienta basada en la salida de la utilidad systeminfo de Windows que proporciona la lista de vulnerabilidades a las que el sistema operativo es vulnerable, incluyendo cualquier exploit para estas vulnerabilidades. Se admite...

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introduction On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October Q3 Critical Patch Update CPU, which fixed a Weblogic remote code execution vulnerability CVE-2018-2893 that was not fully...

versionscan

versionscan Versionscan es una herramienta para evaluar la versión de PHP que tienes instalada actualmente y compararla con CVE conocidas y las versiones en las que se corrigieron, para informar sobre posibles problemas. TEN EN CUENTA: El trabajo aún está en progreso para adaptar la herramienta a...

Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — Firmware Reverse Engineering A 20 MHz function generator from about 1994, taken apart in software: two EPROM dumps, an 8051 emulator used as a measuring instrument, and 35 sections of documentation where every single claim is backed by a listing address, an emulator measurement, ...