CVE-2023-29923

PowerJob V4.3.1 Vulnerabilità non autorizzata Puoi usare questo progetto per verificare se il sito web presenta la vulnerabilità CVE-2023-29923 e supporta la verifica batch Utilizzo: 1. python3 CVE-2023-29923.py -u "http://ip:port" 2. python3 CVE-2023-29923.py -f url.txt...

CVE-2018-15473-exp

CVE-2018-15473-exp Questo è un exp per CVE-2018-15473 emmm mi sembra che questa enumerazione di nomi utente per OpenSSH 7.7 sia piuttosto comune, quindi ho scritto un exp che può richiamare il poc, utilizzandolo in combinazione con un dizionario. Il poc è scritto in Python 2.7, mentre openssh.py ...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Backup dei dati su Android 12 e 13, prima dell'aggiornamento di sicurezza di marzo 2024, sfruttando CVE-2024-0044 Uso ./CVE-2024-0044-EXP.sh Esempio ./CVE-2024-0044-EXP.sh com.tencent.mm Note Scoperta della vulnerabilità...

GitLab-Graphql-CVE-2020-26413

GitLab-Graphql-CVE-2020-26413 GitLab-Graphql-CVE-2020-26413 POC Einzelne Überprüfung: python3 GitlabCVE-2020-26413.py -u http://127.0.0.1 Stapelüberprüfung: python3 GitlabCVE-2020-26413.py -f target.txt Erzeugt die Schwachstellenergebnisse im aktuellen Pfad des Skripts...

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script che sfrutta la vulnerabilità del servizio ProFTP 1.3.5 con CVE-2015-3306 Utilizzo .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

CHAMILO-CVE-2023-34960

CHAMILO-CVE-2023-34960 Python 2.7 Compra un caffè : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC Come usare? Installa Python 2.7 Scarica qui python file.py...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creare-un-Ambiente-Docker-Vulnerabile-CVE-2023-30212- Scarica i file dal mio repository usando git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git ora per impostare l'immagine docker Creazione dell'immagine docker usa il comando sudo docke...

CVE-2025-59424

CVE-2025-59424 LinkAce Stored Cross-Site Scripting XSS auf der Seite /system/audit...

CVE-2004-0789-DDOS

sudo python3 exploit.py Enter the DNS server IP address: IP Enter the number of requests to send: NUMBER...

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series Divulgazione di informazioni Argomenti opzionali: -h, --help mostra questo messaggio di aiuto ed esci -u url, --url url URL target, es.: "http://127.0.0.1" -f file, --file file Target nel file, es.: "ip.txt" Utilizzo python3 CVE-2022-31269.py ...

CVE-2022-30525

CVE-2022-30525 Vulnerabilità di iniezione di comandi remoti nel firewall Zyxel CVE-2022-30525 Argomenti opzionali: -h, --help mostra questo messaggio di aiuto ed esci -u url, --url url URL target es: "http://127.0.0.1" -f file, --file file Target in file es: "ip.txt" Uso python3 CVE-2022-30525.py...

PyUsernameMapScriptRCE

PyUsernameMapScriptRCE CVE-2007-2447 exploit scritto in python per ottenere una reverse shell...

CVE-2024-24919

CVE-2024-24919 Ciao a tutti, condivido uno script modificato di CVE-2024-24919 in grado di estrarre percorsi classificati come critici...

CVE-2026-105829 League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass

League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers can place a lone script or iframe line followed by a block supplying...

CVE-2026-105829 League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass

League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers can place a lone script or iframe line followed by a block supplying...

CVE-2026-105829

League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers can place a lone script or iframe line followed by a block supplying...

CVE-2026-105400 ImageMagick before 7.1.2-31 Unclosed File Pointer via Magick Script

ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...

CVE-2026-105400

Removed by vendor...

EUVD-2026-95004

ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...

CVE-2026-105400

...