CVE-2023-43876-October-CMS-Reflected-XSS---Installation

October CMS Reflected XSS v3.4.16 Author: Sergio Description: Cross-Site Scripting XSS vulnerabilitiy in installation of October v.3.4.16 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field. Attack Vectors: A vulnerability in the...

CVE-2024-4367

CVE-2024-4367 POC Usage python poc.py mal.pdf "alert'0xr2r'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js POC scaner templates...

CVE-2024-29296-PoC

Portainer CVE-2024-29296 Proof of Concept Script Requirements python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Usage python3 main.py Enter Target URL: Enter Username List: Credits Reported by: https://github.com/ThaySolis/CVE-2024-29296...

CVE-2024-23113

CVE-2024-23113 This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE. How To Use 1. Create a "clients.txt" file, and import a list of all your clients IP addresses. 2. Create a "vul.txt" file. This will be used to export the scripts findings. 3. Run...

Detect-CVE-2018-20250

Detect-CVE-2018-20250 This script detects whether a .rar file may have the configuration to exploit CVE-2018-20250. For this detection, the file command and the strings command, which are available in most Linux distributions, are used. Usage ./detectwinrarexploit.sh Payload extraction To extract...

CVE-2021-41773-Scanner

CVE-2021-41773 Shodan scanner CVE-2021-41773 Shodan scanner via multithread Python script Usage: git clone https://github.com/anldori/CVE-2021-41773-Scanner cd CVE-2021-41773-Scanner/ Add your private Shodan API to scan.py python3 scan.py...

Mass-CVE-2021-3129-Scanner

Mass Scanner for CVE-2021-3129 Laravel Debug RCE Usage $ bash massCVE-2021-3129scan.sh list.txt...

CVE-2007-2447

CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : netcat -lnvp Table of contents Exemples Requirements Payloads Examples py...

CVE-2024-23334

CVE-2024-23334 !IMPORTANT Keep in mind that sometimes aiohttp may be configured in another folder and not in the static one, if that is the case change the value of the folder variable in the script. How To Use Exploit !CAUTION Disclaimer: This script is made for ethical uses...

CVE-2020-14882-checker

CVE-2020-14882 checker CVE-2020-14882 detection script This checker is based on the PoC by jas502n. Using a gadget, it tries to substitute the HTTP response from a page, which an unauthenticated user should not have access to. python cve202014882checker.py --ip 192.168.1.75 python...

deploy-goad

Desplegar GOAD v2 en Ubuntu Linux 22.04 Este script simplifica los requisitos previos necesarios al desplegar el laboratorio de Active Directory proporcionado por https://github.com/Orange-Cyberdefense/GOAD Descripción general Asegúrate de que el equipo tenga las extensiones VTx habilitadas en la...

randy

Randy Qué Este es un exploit de RCE sin autenticación previa para Inductive Automation Ignition que afecta a las versiones = 8.1.16. No logramos explotar los fallos en Pwn2Own Miami 2022 porque teníamos un exploit descuidado y ningún entorno de depuración, pero desde entonces hemos encontrado el...

cs-get-last-error

cs-get-last-error Obtén mensajes de error a partir de los códigos de GetLastError directamente dentro del cliente de Cobalt Strike, sin la ayuda de la búsqueda de Google, net helpmsg ni Microsoft Error Lookup Tool. Los mensajes de error están incluidos en el script aggressor y no se requiere...

openssl-heartbleed-fix

openssl-heartbleed-fix OpenSSL Heartbleed CVE-2014-0160 Fix script Sammy Fung [email protected] OpenSSL Heartbleed CVE-2014-0160 http://www.us-cert.gov/ncas/alerts/TA14-098A bug is now discovered by network security professionals, which many systems using some OpenSSL versions are affected. ...

Gombruc

Gombruc privilege escalation for linux all versions This vulnerability is related to CVE-2025-0401, which affects all Linux systems. With the help of this bash script, you can give your user any level of access, up to and including Root access. Warning: This exploit is for educational purposes on...

CVE-2018-7849

CVE-2018-7849 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2022-29469

CVE-2022-29469 Thanks To All SynixCyberCrimeMY Members + Muslim Hackers How To Usage ? git clone https://github.com/S4muraiMelayu1337/CVE-2022-29469/ cd CVE-2022-29469 pip3 install -r requirements.txt python3 cve.py...

CVE-2022-26134-POC

Description： This is a script tool that supports multi-threaded batch detection of Confluence OGNL injection vulnerability CVE-2022-26134 Usage: The file url.txt contains the target addresses Results: 1. Single target detection 2. Batch detection Successful detection will be highlighted in yellow...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will...

CVE-2016-10993

CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...