CVE-2019-0708-Tool

CVE-2019-0708-工具 达到50颗星后分享工具... 联系方式...

CVE-2019-0708-Check-Device-Patch-Status

CVE-2019-0708-漏洞扫描器 用于运行并判断特定设备是否已针对CVE-2019-0708进行修补的Powershell脚本。该脚本检查termdd.sys文件是否已正确更新，且版本级别是否达到或高于2019年5月14日补丁中发布的版本。 所有termdd.sys版本已由Qualys确认。 https://www.qualys.com/research/security-alerts/2019-05-14/microsoft/ “针对CVE-2019-0708 以下版本的termdd.sys及其对应的KB已得到验证： KB4500331 - 5.1.2600.7701,...

unisoc-su

unisoc-su 一种利用 CVE-2025-31710 连接到 cmdskt 抽象套接字，在未修补的展讯机型上获取 root shell 的方法 在大家喊叫之前，展讯公司本身已授权我在 CVE-2025-31710 公告后发布此内容，所以请保持安静。 让我们先讲个笑话 是的，你没有做梦，今天我要向你展示一个针对 com.sprd.engineermode 应用的系统 shell 漏洞，并且由于它是 cmdskt 的受信客户端之一，我也能成功进入。这个抽象套接字是作为 root 运行的 cmdservices 服务的一部分，所以，是的，我很高兴向你介绍 unisoc-su。这里是从...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Deterministic, multi-phase scanning with 317 modules across content discovery, browser/SPA spidering, and...

Strapi-CVE-2019-1881

Strapi-CVE-2019-1881 作者：Kynda 1. pip install requests 2. python3 exploit.py :...

Log4NetSolarWindsSNMP-

Log4NetSolarWindsSNMP- 用于 Solarwinds DLLs 的 CVE-2018-1285 警报的测试应用程序...

drupal-exploit

drupal-exploit CVE-2018-7600 该脚本将利用Drupal 7 : drupal.py https://drupaldomain/drupal/ uid=33www-data gid=33www-data groups=33www-data https://nvd.nist.gov/vuln/detail/CVE-2018-7600 https://www.drupal.org/sa-core-2018-002...

CVE-2025-49113

CVE-2025-49113 RCE 漏洞利用 此漏洞利用中用户名/密码认证的方法分为 4 步 代码有点凌乱。...

CVE-2025-55182

CVE-2025-55182 https://github.com/user-attachments/assets/0da9a623-fe2a-4a96-8192-7a07a76635d7 React2Shell 扫描器 - Burp Suite 扩展 描述 React RCE 扫描器是一个 Burp Suite 扩展，用于检测和利用 React 漏洞 CVE-2025-55182（React 应用中的远程代码执行）。它会在浏览时自动捕获 URL，去除重复项，应用正则表达式过滤器进行排除，并扫描该漏洞。无需付费的 Burp 订阅，社区版即可使用。...

log4shell4shell

log4shell4shell Log4j - 多功能工具。查找和修复可能的 CVE-2021-44228 漏洞 - 提供完整的 LOG4SHELL 测试/攻击环境 功能 检查你的 Linux/Mac/BSD 和 Windows 系统是否存在 CVE-2021-44228 漏洞 通过删除 log4j Java 类或设置一些环境变量来修复你的系统 概念验证：你可以运行一个模拟的 Spring Boot 服务器来自己测试该漏洞（https://github.com/christophetd/log4shell-vulnerable-app） 你可以对指定的 IP-端口发起攻击，并包含一个...

CVE-2023-7028-GitLab

GitLab-CVE-2023-7028 示例 python3 attack.py -u http://TargetIP:8000 -t [email protected] -e [email protected]...

system_core_AOSP10_r33-CVE-2021-0330

此存储库没有 README。...

CVE-2020-0601

此存储库没有 README。...

WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting

WordPress Goto Tour & Travel theme before 2.0 contains an unauthenticated reflected cross-site scripting vulnerability. It does not sanitize the keywords and startdate GET parameters on its Tour List page. id: CVE-2021-24235 info: name: WordPress Goto Tour & Travel Theme =2.0 to mitigate the XSS...

Oliver 5 Library Server <8.00.008.053 - Local File Inclusion

Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. id: CVE-2021-45027 info: name: Oliver 5 Library Server 8.00.008.053 - Local File Inclusion author: gy741 severity: high description: Oliver 5 Library Server versions prior t...

IceWarp Mail Server - Open Redirect

IceWarp Mail Server contains an open redirect via the referer parameter. This can lead to phishing attacks or other unintended redirects. id: CVE-2021-36580 info: name: IceWarp Mail Server - Open Redirect author: DhiyaneshDk severity: medium description: | IceWarp Mail Server contains an open...

GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.

Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. id: CVE-2021-43778 info: name: GLPI plugin Barcode 2.6.1 - Path Traversal Vulnerability. author:...

WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site Scripting

WordPress Supsystic Ultimate Maps plugin before 1.2.5 contains an unauthenticated reflected cross-site scripting vulnerability due to improper sanitization of the tab parameter on the options page before outputting it in an attribute. id: CVE-2021-24274 info: name: WordPress Supsystic Ultimate Ma...

Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass

Zyxel NBG2105 V1.00AAGU.2C0 devices are susceptible to authentication bypass vulnerabilities because setting the login cookie to 1 provides administrator access. id: CVE-2021-3297 info: name: Zyxel NBG2105 V1.00AAGU.2C0 - Authentication Bypass author: gy741 severity: high description: Zyxel NBG21...

myfactory FMS - Cross-Site Scripting

myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. id: CVE-2021-42565 info: name: myfactory FMS - Cross-Site Scripting author: madrobot,daffainfo severity: medium description: | myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. impact: |...