struts-pwn_CVE-2018-11776

struts-pwn - CVE-2018-11776 Exploit An exploit for Apache Struts CVE-2018-11776 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/demo/struts2-showcase/index.action' Check if the vulnerability exists against a list of URLs. python...

CVE-2018-2893

本软件仅限用于学习交流禁止用于任何非法行为 起这个名字主要目的是蹭一下2893的热度，反弹shell生成器 主要作用是生成自己的外网nc监听对象，希望可以帮助到一些代码小白，2893 2628不适用需要借助第三方服务端口生成远程服务 github搬运工...

GPON_RCE

GPONRCE 用于GPON家庭路由器远程代码执行的漏洞利用工具（CVE-2018-10562），使用Python编写。...

CVE-2018-14729

CVE-2018-14729...

m33tfinder

M33tfinder es una herramienta para detectar rangos de ID de conferencia activos en un servidor Cisco Meeting Server. M33tbreak es una herramienta para probar códigos de acceso débiles contra una conferencia en un servidor Cisco Meeting Server. Pins.txt contiene, por ejemplo, códigos de acceso de ...

joomla-cve-2018-6396

Joomla-CVE-2018-6396 Componente Joomla! Google Map Landkarten = 4.2.3 - Inyección SQL Fecha: 03/03/2018 Página del proveedor: http://www.joomla-24.de/ Enlace del software: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/ Versión: = 4.2.3...

MoodleExploit

Moodle 漏洞利用 漏洞利用标题: Moodle v3.4.1 RCE 漏洞利用 Google Dork: inurl:"/course/jumpto.php?jump=" 日期: 2019年3月15日 漏洞利用作者: Darryn Ten 厂商主页: https://moodle.org 软件链接: https://github.com/moodle/moodle/archive/v3.4.1.zip 版本: 3.4.1 可能小于3.5.0，甚至可能是3.x 测试环境: Linux 上的 Moodle v3.4.1 CVE : CVE-2018-1133...

CVE-2018-8420

CVE-2018-8420...

cve-2018-1335

安卡拉耶尔德勒姆贝亚齐特大学计算机工程系 CENG 325 - 信息安全与隐私原理 CENG201 面向对象编程项目 小组成员 @canumay @aslihann @ezgigucuyener @mburakdonmez 参考文献 NVD - CVE-2018-1335 漏洞利用数据库 - Apache Tika-server 1.18 - 命令注入 Rhino安全实验室 - 利用CVE-2018-1335：Apache Tika中的命令注入 Metasploit 免责声明 该利用代码由网络安全研究员David Yesland @Daveysec 编写，仅供教育用途使用。 里程碑1 –...

RTF_11882_0802

RTF118820802 CVE-2017-11882 CVE-2017-11882：https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE上的CVE-2017-11882：https://vulners.com/cve/CVE-2017-11882 研究文章：https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about...

CVE-2018-1111

CVE-2018-1111 CVE-2018-1111 DynoRoot...

DVR_Sploit

DVRSploit Script sencillo en python3 para automatizar CVE-2018-9995 Requisitos: requests pip install requests Uso: root@fuckmachine: python3 dvrsploit.py Introduce el host del DVR: 192.168.69.69 Introduce el puerto del DVR: 88 Lista de dispositivos:...

SQL-ThinkPHP-5.0.24-RCE-

SQL-ThinkPHP-5.0.24-RCE- SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力...

CVE-2018-2636

安装 root@kitploit: $ pip install --user requests argparse unicodedata 信息 CVE-2018-2636 的 POC。 使用示例 root@kitploit: python eGw.py -H 127.0.0.1 -P 8080 -i ... Let's get info about server ! Your instance is vulnerable to CVE-2018-2636 ... 链接 Oracle Critical Patch Update Advisory January 2018 -...

Lokomedia CMS - Local File Inclusion

A Local File Inclusion LFI vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information. id: CVE-2010-2018 info: name: Lokomedia CMS - Local File Inclusion author: r3Y3r53 severit...

FlexPaper/FlowPaper 2.3.6 - Remote Code Execution

The Publish Service in FlexPaper later renamed FlowPaper 2.3.6 allows remote code execution via setup.php and changeconfig.php. id: CVE-2018-11686 info: name: FlexPaper/FlowPaper 2.3.6 - Remote Code Execution author: iamnoooob,pdresearch,pszyszkowski severity: critical description: | The Publish...

ACME mini_httpd <1.30 - Local File Inclusion

ACME minihttpd before 1.30 is vulnerable to local file inclusion. id: CVE-2018-18778 info: name: ACME minihttpd 1.30 - Local File Inclusion author: DhiyaneshDK,dogasantos severity: medium description: ACME minihttpd before 1.30 is vulnerable to local file inclusion. impact: | Successful...

Splunk <=7.0.1 - Information Disclosure

Splunk through 7.0.1 is susceptible to information disclosure by appending raw/services/server/info/server-info?outputmode=json to a query, as demonstrated by discovering a license key. id: CVE-2018-11409 info: name: Splunk =7.0.1 - Information Disclosure author: harshbothra severity: medium...

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter. id: CVE-2018-7196 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity: medium...

WordPress SagePay Server Gateway for WooCommerce <1.0.9 - Cross-Site Scripting

WordPress SagePay Server Gateway for WooCommerce before 1.0.9 is vulnerable to cross-site scripting via the includes/pages/redirect.php page parameter. id: CVE-2018-5316 info: name: WordPress SagePay Server Gateway for WooCommerce 1.0.9 - Cross-Site Scripting author: daffainfo severity: medium...