64373 matches found
CVE-2017-1000250-PoC
CVE-2017-1000250-PoC Proof of concept exploit script for CVE-2017-1000250. Written while researching for the essay in TTM4137...
goahead-rce-exploit
GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/handler set payload generic/shellbindtcp msf6 exploitmulti/handler set LPORT=1337 msf6 exploitmulti/handler set RHOST=192.168.1.200 msf6 exploitmulti/handler run Started bind TCP handler against 192.168.1.200:1337...
CVE-2017-7648.
CVE-2017-7648. Un análisis de CVE-2017-7648...
CVE-2017-1000117
Server Launcher for CVE-2017-1000117 Run the following command, then open your web browser and go to http://localhost:8088! root@kitploit: $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 If "Hello World" is displayed, update git! It's vulnerable...
RTF-Cleaner
RTF-Cleaner RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically. Use this tool to statically find URLs in obfuscated RTF documents. Usage: .\rtfCleanerUniversal.ps1 path-to-file Example: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' If the built in...
CVE-2017-8465
CVE-2017-8465 Exploit para CVE-2017-8465...
CVE-2017-5487
PoC - CVE-2017-5487 - Enumeración de Usuarios de WordPress vía REST Configuración root@kitploit: git clone https://github.com/ndr-repo/CVE-2017-5487.git powershell -noexit -ExecutionPolicy Bypass -File .ps1 Uso root@kitploit: .\Enumerate-WordPressOrgMembersREST.ps1 Ruta Alternativa 1 para Evadir ...
PoC-CVE-2017-0199
PoC-CVE-2017-0199 Exploit toolkit for vulnerability RCE Microsoft RTF. About this vulnerability: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...
CVE-2017-12636
Couchdb Arbitrary Command Execution Vulnerability CVE-2017-12636...
Nginx-Remote-Integer-Overflow-Vulnerability
Vulnerabilidad de desbordamiento de enteros remoto en Nginx CVE-2017-7529 https://www.cvedetails.com/cve/CVE-2017-7529/...
ReparcelBug
PoC del bug de desajuste de writeToParcel/createFromParcel en Android Consulta https://github.com/michalbednarski/IntentsLab/issues/2issuecomment-344365482 para la descripción del bug. Este repositorio contiene el PoC para CVE-2017-0806, que es un desajuste en la clase GateKeeperResponse...
CVE-2017-7269-Echo-PoC
CVE-2017-7269 Verificación de ejecución remota de código con eco Informe de análisis de nuestro equipo sobre esta vulnerabilidad CVE-2017-7269: https://ht-sec.org/cve-2017-7269-vulnerabilities/ El PoC por defecto solo ejecuta calc.exe; ahora se ha modificado para que pueda responder a las...
cve-2017-2824-reverse-shell
Este repositorio no tiene un README...
CVE-2017-0541
PoC y análisis de vulnerabilidad de CVE-2017-0541...
CVE-2017-9798
CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found...
CVE-2017-8759
CVE-2017-8759 script de detección de vulnerabilidades...
Node.js <8.6.0 - Directory Traversal
Node.js before 8.6.0 allows remote attackers to access unintended files because a change to ".." handling is incompatible with the pathname validation used by unspecified community modules. id: CVE-2017-14849 info: name: Node.js 8.6.0 - Directory Traversal author: RandomRobbie severity: high...
Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution
The Oracle WebLogic Server component of Oracle Fusion Middleware Web Services versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2 is susceptible to a difficult to exploit vulnerability that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic...