CVE-2018-6389

CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Down Any Wordpress site under 4.9.3 The flaw affects the load-scripts.php WordPress script, it receives a parameter called load About PoC A simple Script In Python With threading could allow anyone to take down most WordPress websites with...

CVE-2024-32002

CVE-2024-32002 Just small script to exploit CVE-2024-32002 based on CVE available How to do First, create 2 empty repos on github or gitlab. Then git clone and run script this. Finally: git clone –recursive repo2 to auto RCE...

CVE-2026-49105

CVE-2026-49105 CVE-2026-49105 WP Zendesk PHP Object Injection Exploit...

CVE-2018-5767-AC9

Research and Author David Baker Article: Sometimes Exploits Need Patches Too! Working Through a Change of Address External link CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a...

MYSQL-UDF-Exploit

MYSQL-UDF-Exploit MYSQL UDF Exploit...

cve-2023-25194

Apache Druid CVE-2023-25194 CVE-2023-25194 es una vulnerabilidad de deserialización que afecta a Apache Kafka. Este go-exploit demuestra la explotación de CVE-2023-25194 contra Apache Druid usando Kafka. Este tipo de ataque normalmente requiere una infraestructura de atacante LDAP JNDI que...

CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 WebinarIgnition Exploit Usage Examples Basic Usage python3 exploit.py https://target.example.com -e [email protected] Specify Webinar Page python3 exploit.py https://target.example.com -e [email protected] -w https://target.example.com/webinar/my-webinar/...

Pentagram-exploit-tester

Pentagram-exploit-tester A test app to check if your device is vulnerable to CVE-2021-30955. This tool incorporates @b1n4r1b01's kernel exploit based on CVE-2021-30955 and will run it on your device to test if the device is compatible. Exploit is known to work with iOS 15.0 to 15.1.1 and 15.2 BET...

CVE-2024-45519

CVE-2024-45519 SMTP Vulnerability Exploit Script Overview This script checks for vulnerabilities in an SMTP server and, if found, exploits the vulnerability by establishing a reverse shell connection to your machine. Features Port Checking: Verifies if the target SMTP port is open. Vulnerability...

CVE-2024-56426

Exynos 990 / Exynos9830 Unified BootROM Exploit Unified CVE-2024-56426 tooling for the Exynos 990 Galaxy S20, S20 FE, and Note20 families. The exploit accepts all ten model names and maps them onto six verified stock bootloader families. !CAUTION The tracked key bundle and generated images are...

bluekeep

bluekeep Trabajo público para CVE-2019-0708 Actualización del 2019-11-17 Se añadió código de POC de exploit para Windows 7 de 32 bits. Usando la dirección dentro del código de exploit POC tuve 80% de éxito contra mi VM de prueba. Probablemente podría modificarse para aumentar. Uso Reemplaza la...

phuip-fpizdam

PHuiP-FPizdaM Cos'è Questo è un exploit per un bug in php-fpm CVE-2019-11043. In alcune configurazioni nginx + php-fpm, il bug è possibile da innescare dall'esterno. Questo significa che un utente web potrebbe ottenere l'esecuzione di codice se hai una configurazione vulnerabile vedi sotto. Write...

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the BIOS, where a user can cause an Integer Overflow or Wrap-around error through network means. Successful exploitation of this vulnerability may lead to a denial of service...

Astra Linux – Vulnerability in edk2

EDK2 is vulnerable to a vulnerability in the CreateHob function, which allows a user to trigger an integer overflow that leads to a buffer overflow through a local network. Successful exploitation of this vulnerability may result in compromises of confidentiality, integrity, and/or availability...

Astra Linux – Vulnerability in Chromium

Before version 92.0.4515.107, using free memory in GPUs with Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in tab groups in Google Chrome prior to version 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using WebAudio with "after free" in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Apache2

When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...

Astra Linux – Vulnerability in Chromium

Before version 92.0.4515.107, using Autofill in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in binutils

A flaw has been discovered in GNU Binutils 2.45. The affected function is bfdelfparseehframe in the file bfd/elf-eh-frame.c of the Linker component. Executing certain manipulations can lead to a heap-based buffer overflow. This attack is limited to local executions. The exploit has been published...