jboss-autopwn

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

Embedded-Backdoor-Connection

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

cve-2010-1622_learning_environment

cve-2010-1622learningenvironment tomcat 6.0.26 Jdk1.8.45 This Project Include simple SpringMvc source code and a Dockerfile you can use to build the environment...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

CVE-2010-3600-PythonHackOracle11gR2

This repository does not have a README...

Home-Network-Vulnerability-Assessment

Home-Network-Vulnerability-Assessment Security audit and vulnerability analysis CVE-2014-3566 and CVE-2010-2333 on the local network infrastructure and residential router. Security Audit and Vulnerability Analysis on Residential Router Project Description This project documents a perimeter securi...

Spring-CVE-2010-1622

Spring-CVE-2010-1622...

cved

CVED A tool to manage vulnerable docker containers INSTALLATION qt = 5.x docker git qmake make sudo make install USAGE Create the docker group if it doesn't already exist. sudo groupadd docker Add your user to the docker group. sudo usermod -aG docker $USER Log out and log back in so that your...

CVE-2010-3971-hotpatch

CVE-2010-3971-hotpatch Do you own security hotfix with Deviare. Original article: using Deviare to create a temporary zero day patch...

-cve-2010-3904-report

This repository does not have a README...

unrealircd-backdoor-pentest-report

🛡️ UnrealIRCd Backdoor Penetration Test A controlled penetration testing project focused on identifying, exploiting, and remediating the UnrealIRCd 3.2.8.1 backdoor CVE-2010-2075 in an isolated training environment. Disclaimer: This project was conducted strictly for educational and authorized...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

CVE-2020-17144-EXP

CVE-2020-17144-EXP 条件: Exchange2010; 普通用户 默认用法写webshell: CVE-2020-17144-EXP.exe mail.example.com user pass 执行命令 & 端口复用: 修改ExploitClass.cs 参考 @zcgonvh...

w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 Remote code execution running on w3 total cache cve 2013-2010 Usage: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" Output: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import request...

Joomla! Component Jstore - 'Controller' Local File Inclusion

A directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-5286 info: name: Joomla! Component Jstore - 'Controller...

Joomla! Component Jimtawl 1.0.2 - Local File Inclusion

A directory traversal vulnerability in the Jimtawl comjimtawl component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly unspecified other impacts via a .. dot dot in the task parameter to index.php. id: CVE-2010-4769 info: name: Joomla! Component Jimtawl 1.0.2 - Local...

Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion

A directory traversal vulnerability in the Seber Cart comsebercart component 1.0.0.12 and 1.0.0.13 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1313 info: name: Joomla! Component Sab...

Joomla! Component Advertising 0.25 - Local File Inclusion

A directory traversal vulnerability in the Advertising comadvertising component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1473 info: name: Joomla! Component...