CVE-2011-2523

vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...

ridenum

RIDENUM - Une méthode open source simple pour effectuer des attaques par force brute sur des sessions null Copyright 2018 TrustedSec Écrit par : David Kennedy ReL1K Twitter : @HackingDave et @TrustedSec Site web : https://www.trustedsec.com . . . . . | \ | | | \ | || \ | | | | | | | / | | | | | |...

msmailprobe

msmailprobe Énumération d'Office 365 et Exchange Il est largement connu que l'OWA Outlook Web App est vulnérable aux attaques d'énumération d'utilisateurs basées sur le temps. Cet outil exploite tous les services connus, ainsi que certains moins connus, exposés par défaut par les installations...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

EUVD-2026-91919

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-97344 Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2022-2588

CVE-2022-2588 The fix The bug is fixed in Linux v5.19 by this commit. The bug The bug was introduced in Linux v3.17 by this commit back to 2014. It requires User Namespaces to trigger. This bug is very similar to CVE-2021-3715, which was caused by improper operation on the route4filter's linked...

CVE-2020-25627

CVE-2020-25627 사용자 프로필의 moodlenetprofile 매개변수를 통한 저장형 XSS 이 CVE에 대한 나의 PoC 사용자 요구 사항: 학생 또는 등록이 가능한 사이트 moodlenetprofile의 XSS Step 1: Log in with an authenticated user Can register or through creating a new user without assigning roles Step 2: Quick access to Edit profile...

CVE-2024-29296

CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...

weape

wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Auto extracts EAP 802.1x user names Developed by Daniel Compton at Info-Assure Ltd https://github.com/commonexploits/weape.git Installing git clone https://github.com/commonexploits/weape.git How To Use...

wpbf

wpbf! wpbf - это инструмент для брутфорса, предназначенный для удаленного тестирования надежности паролей, перебора имен пользователей и обнаружения плагинов на сайте WordPress. Описание ^^^^^^^^ Скрипт попытается войти в панель управления WordPress через форму входа, используя смесь перечисленны...

CVE-2019-18634

CVE-2019-18634 This is a basic reproduction of CVE-2019-18634, a privilege escalation exploit in sudo with pwfeedback enabled. This was created as part of a project for NTU SC3010 to demonstrate a security vulnerability. To reproduce the exploit, a Docker image of Ubuntu 20.04 was used. A...

CVE-2019-1476

CVE-2019-1476 AppXSvc Arbitrary File Overwrite DoS I have independently reported this vulnerability to MSRC as part of my research inspired by CVE-2019-0841 originally reported by Nabeel Ahmed. This vulnerability allows a regular user to overwrite arbitrary files. However, the attacker's...

CVE-2017-8759_-SOAP_WSDL

What is CVE-2017-8759 is Remote Code Execution Vulnerability On SOAP WDSL A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

Redeye

Redeye This project was built by pentesters for pentesters. Redeye is a tool intended to help you manage your data during a pentest operation in the most efficient and organized way. Table of Contents Redeye Table of Contents The Developers Overview Installation Docker Source General Special-Than...

ConscryptTrustUserCerts

Magisk - Conscrypt Trust User Certs Этот модуль добавляет все установленные пользовательские сертификаты в хранилище сертификатов APEX-модуля com.android.conscrypt в Android 14, благодаря чему они будут автоматически использоваться при построении цепочки доверия. Установка 1. Установите Magisk 2...

ssh_enum_py

sshenumpy SSH user enumeration script based on timing differences and authentication responses. Exploits the same vector as CVE-2018-15473 in vulnerable versions of OpenSSH ≤ 7.7, although it can also reveal patterns in modern configurations. Works with Python 3 + Paramiko and supports: Banner...

kernel-exploits

Эксплойты ядра Различные эксплойты ядра CVE-2021-22555 Локальный root-эксплойт для Linux. Обновлённая версия эксплойта theflow для CVE-2021-22555. Запись за пределами буфера в куче, затрагивающая Linux начиная с v2.6.19-rc1, была обнаружена в net/netfilter/xtables.c. Это позволяет атакующему...

bluemonday

bluemonday bluemonday est un assainisseur HTML implémenté en Go. Il est rapide et hautement configurable. bluemonday prend en entrée du contenu généré par l'utilisateur non fiable et renvoie du HTML qui a été assaini en fonction d'une liste blanche d'éléments et d'attributs HTML approuvés, afin q...