Tenda-Router-VR-and-Exploit

Tenda-Router-VR-and-Exploit This write-up shows exactly how I emulated the AC15 V15.03.05.19 firmware’s webserver with QEMU, made it reachable from the host browser, and exercised the vulnerable /goform/setUsbUnload handler CVE-2020-10987 to get command execution inside the emulated rootfs...

How-to-Patch-CVE-2025-32709

Cómo Parchear la Vulnerabilidad CVE-2025-32709 Flujo de trabajo real de parcheo para CVE-2025-32709. Desde la instalación del hotfix hasta la validación de alertas SIEM: este repositorio documenta cada paso con capturas de pantalla, comandos y lógica de detección. Captura de pantalla del panel de...

CVE-2022-30129

This repository does not have a README...

F5-Big-IP-CVE-2020-5902-mass-exploiter

F5-Big-IP-CVE-2020-5902-mass-exploiter F5 Big-IP CVE-2020-5902 mass exploiter/fuzzer. usage: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

Linksys-WRT54GL-Exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router CVE-2022-43973 A 10-phase embedded security research journey — from JTAG pin discovery to remote code execution on a MIPS-based consumer router. | ---|--- Author| Umberto Della Monica Role| MSc Cybersecurity Student —...

CVE-2023-51385

CVE-2023-51385...

CVE-2019-5420-PoC

CVE-2019-5420-PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Nice argparse stuff, not a bad PoC Usage root@kitploit: usage: script.py -h --appname APPNAME --cookie COOKIE --modify KEY...

ply_exploit_rejection

Ply 3.11 Exploit Rejection This project argues that CVE‑2025‑56005 be rejected. Argument 1: The Proof of Concept does not complete sucessfully In this project the code from the proof of concept has been copied to main.py. Run the proof of concept To run the exploit ensure that you have installed ...

CurveballCertTool

CurveballCertTool CVE-2020-0601 This automated bash script for Code Signing was created using this repository: https://github.com/ollypwn/CurveBall Please use this script for educational purposes only. Requirements openssl ruby osslsigncode Usage ./CurveballCertTool.sh -c: Create new "legit"...

cve-2024-3094

How to detect the CVE-2024-3094 I'll walk through the step-by-step process of detecting CVE-2024-3094, commonly known as the XZ Backdoor, in containers using Trend Micro's Vision One TMAS CLI. This vulnerability presents significant risks to containerized environments, and with the right tools an...

SEP-14.2-Arbitrary-Write

Exploit CVE-2020-5837 El análisis se puede encontrar en el blog de RedyOps Labs: https://labs.redyops.com/index.php/2020/04/27/symantec-endpoint-protection-sep-14-2-eop-via-arbitrary-write/ Herramientas de Terceros Este código de exploit se basa en gran medida en symboliclink-testing-tools, que f...

dp_cryptomg

dpcryptomg Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution. The vulnerability is caused by an...

CVE-2020-13925

CVE-2020-13925 Environment Setup Refer to https://github.com/apache/kylin to deploy using Docker, and change the version to 3.0.1 the vulnerable version. You can remove -m 8G \ it controls the allocated memory size. Then visit http://host:7070/kylin/login. The default username and password are...

CVE-2020-1472-EXP

Ladon Moudle CVE-2020-1472 Exploit Uso: http://k8gege.org/Ladon/cve-2020-1472.html...

react-rsc-cve-2025-55182-lab

CVE-2025-55182 Lab — React Server Components RCE Educational lab demonstrating CVE-2025-55182 — a critical CVSS 10.0 Remote Code Execution vulnerability in React Server Components caused by prototype pollution in the Flight protocol deserializer. Disclaimer: This repository is for educational and...

CVE-2020-13756-env

CVE-2020-13756 Vulnerable Environment Vulnerable test environment for CVE-2020-13756 - Sabberworm PHP CSS Parser Remote Code Execution. Vulnerability Details...

SniperRoost

SniperRoost used to generate a valid attack chain to exploit CVE-2017-11774 tied to iranian apt only reasearch poc dont use for harm please...

UltraViolet

UltraViolet Self-hosted network discovery & search — your own Shodan, on your hardware. TCP/UDP scanning · 100 protocol probes · TLS/JARM fingerprints · CVE matching · full-text search · delta tracking · alerts Quick start · Features · Architecture · Documentation · Production Important. Scan onl...

CVE-2021-3156

This repository does not have a README...

Learn-about-cve-2025-31133-poc

Aprende-sobre-cve-2025-31133-poc Resumen Una demostración de prueba de concepto y un entorno de aprendizaje para CVE-2025-31133 , una vulnerabilidad de seguridad en runc que permite eludir la protección maskedPaths mediante una condición de carrera. Los maskedPaths están diseñados para evitar que...