68029 matches found
CVE-2026-105801
A flaw was found in openapi-python-client. The generator fails to properly sanitize input from OpenAPI specification documents before rendering code strings and docstrings into generated Python files. An attacker could supply a specially crafted specification to inject arbitrary Python code,...
CVE-2014-6271
CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. 📝 Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...
CVE-2025-32433-exploit
CVE-2025-32433-exploit rlwrap -cAr nc -lnvp 4444 python3 exploit.py...
CVE-2021-41773.git1
CVE-2021-41773 Fast python tool to test apache path traversal CVE-2021-41773 in a List of url Usage :- create a live urls file and use the flag "-l" python3 apachepathtraversal.py -l urls-list.txt...
ExchangeWeaknessTest
ExchangeWeaknessTest This script test the CVE-2021-26855 vulnerability on Exchange Server. Example python3 ExchangeWeaknessTest.py mydomain.com Licence Licensed under the GPL, version 3...
Improper Neutralization Of Special Elements In Data Query Logic
MongoDB Python Driver is vulnerable to Improper Neutralization of Special Elements in Data Query Logic. The vulnerability is due to improper handling of caller-supplied structured file identifiers, which allows an authenticated attacker to manipulate GridFS queries to access unintended stored fil...
CVE-2023-38646-PoC-Metabase
CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...
CVE-2023-27997-POC
Usage: python3 cve-2022-42475.py rhost rport lhost 'command' Exemple: python3 cve-2022-42475.py 192.168.10.1 8443 10.10.1.1 'ls -la /' Disclaimer: This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is...
cve-2024-36401-security-simulator
CVE-2024-36401 Security Incident Analysis & Detection Simulator A Python-based educational simulator that models a fictional network-security incident inspired by the real-world exploitation of CVE-2024-36401. The project demonstrates how vulnerability management, network segmentation, least...
CVE-2026-94545
cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...
K000163575: Python vulnerabilities CVE-2026-4360 and CVE-2026-57585
Security Advisory Description CVE-2026-4360 In the Tarfile.extract function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing...
CVE-2025-69516
CVE-2025-69516 - Ejecución Remota de Código en Tactical RMM Este repositorio contiene un script de Python que automatiza la explotación de la vulnerabilidad SSTI CVE-2025-69516 en Tactical RMM. Ha sido probado en la versión 1.3.1. Uso python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id"...
CVE-2017-7921
CVE-2017-7921 익스플로잇 이 스크립트는 CVE-2017-7921 취약점이 있는 카메라와 상호작용하여 다음 작업을 수행할 수 있습니다: 1. 카메라 관리자 비밀번호가 포함된 구성 파일을 다운로드하고 복호화합니다. 2. 매초 이미지를 지속적으로 다운로드합니다. 3. 다운로드한 일련의 이미지를 비디오로 변환합니다. 요구 사항 Python 3.x requirements.txt에 나열된 패키지. 다음 명령어로 설치: pip install -r requirements.txt 사용법 이 스크립트는 다음 인수를 사용합니다: -p...
security-log-analyzer
🛡️ Security Log Analyzer A fast, dependency-light Python CL...
CVE-2023-34233_Proof_OF_Concept
Snowflake Connector CVE-2025-24793 PoC This repository contains Proof of Concept PoC code for testing CVE-2025-24793 vulnerability in Snowflake Connector for Python. The project includes both patched and unpatched versions to demonstrate the vulnerability and its fix. Prerequisites Docker install...
CVE-2025-55182
CVE-2025-55182 Exploit A simple python script that exploits the vulerability in React Server Components in CVE-2025-55182 by injecting a shell in the application. The script is tested on Next.js version 16.0.6 Usage Clone the repository git clone https://github.com/ahmedshamsddin/CVE-2025-55182 R...
CVE-2024-47167-Environment-Setup
Components: 1. gradiocontainer: hosts internal HTTP server on port 5678 2. targetinternalserver: launches a python app using vulnerable version of gradio 4.40.0...
cve-2020-1472
ZeroLogon 테스트 스크립트 Impacket 라이브러리를 사용하여 Zerologon 익스플로잇CVE-2020-1472의 취약점을 테스트하는 Python 스크립트입니다. Netlogon 인증 우회를 수행하려고 시도합니다. 스크립트는 우회에 성공하면 즉시 종료되며, 어떤 Netlogon 작업도 수행하지 않습니다. 도메인 컨트롤러에 패치가 적용된 경우, 탐지 스크립트는 2000쌍의 RPC 호출을 전송한 후 포기하고 대상이 취약하지 않다고 결론을 내립니다 위음성 확률 0.04%. 설치 Python 3.7 이상과 Pip이 필요합니...
CVE-2022-46169
CVE-2022-46169 POC Proof of concept / CTF script for exploiting CVE-2022-46169 in Cacti, versions =1.2.22 This script was written to solve a CTF challenge. It was based on the following example scripts - I had difficulty understanding what these scripts actually did, so I re-wrote my own...
