68565 matches found
CVE-2018-17456
CVE-2018-17456...
SSHUsernameBruter-SSHUB
SSHUsernameBruter SSHUB Fully functional script for brute forcing a list or supplied usernames againse vulnerable OpenSSH servers with the option to try username/username as login credentials - CVE-2018-15473...
AOSP-ExploitUserDictionary
AOSP-ExploitUserDictionary PoC Exploit for AOSP UserDictionary Content Provider CVE-2018-9375 Security Advisory https://ioactive.com/wp-content/uploads/2018/08/IOActive-Security-Advisory-AOSP-UserDictionaryProvider-v1.0.pdf More Information...
AOSP-DownloadProviderHeadersDumper
AOSP-DownloadProviderHeadersDumper PoC Exploiting Headers Disclosure in Android's Download Provider CVE-2018-9546 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Request-Headers-Disclosure-CVE-2018-9546.pdf More Information...
SoftwareSystemSecurity-2019
SoftwareSystemSecurity-2019 Software System Security Final Assignment: Vulnerability Reproduction CVE-2018-4878 Flash 0day...
clone_and_pwn
Headers Exploit Title: Clone and Pwn Date: June 4th, 2018 Exploit Author: Alejandro Caceres Vendor Homepage: https://git-scm.com/ Software Link: https://git-scm.com/downloads Version: arbitrary code is executed on git client versions In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15....
CVE-2018-11564
CVE-2018-11564 exploit tool of CVE-2018-11564...
CVE-2018-10118
...
userenum-CVE-2018-15473
Userenum CVE-2018-15473 User enumeration for CVE-2018-15473 This script is a method to use a user dictionary with the CVE-2018-15473 SSH User Enumeration by Leap Security @LeapSecurity https://leapsecurity.io. Script developed to solve Valentine HTB machine. How to use it 1st. Download the main...
CVE-2018-6574
This repository does not have a README...
GPON
RCE on GPON home routers CVE-2018-10561 Vulnerability Many routers today use GPON internet, and a way to bypass all authentication on the devices CVE-2018-10561 was found by VPNMentor. With this authentication bypass, it's also possible to unveil another command injection vulnerability...
CVE-2018-7600
LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify Attack Surface Start by listing the running containers: docker ps From the docker ps results, the container for this Lab is: p1/lab09:latest This container exposes port: 0.0.0.0:8011-80/tcp This indicates that the service inside the container is...
ezwinrar
ezwinrar Python tool exploiting CVE-2018-20250 found by CheckPoint folks : https://research.checkpoint.com/extracting-code-execution-from-winrar/ By crafting the filename field of the ACE format, the destination folder extraction folder is ignored, and the relative path in the filename field...
cve-2018-4013
cve-2018-4013 cve-2018-4013 poc Brief Reproduction Reference TALOS-2018-0684 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence TODO : exploit...
Ring0VBA
Ring0VBA CVE-2018-6606 using VBA - https://disrel.com/posts/Ring0VBA-Getting-Ring0-Using-a-Goddamn-Word-Document/...
exploit_CVE-2018-6574
This repository does not have a README...
CVE-2018-16763
This repository does not have a README...
Zur-Go-GET-RCE-Solution
CVE-2018-6574-Solution...
BUI-select-xss
BUI-select-xss cve-2018-8108 During a security test, this issue was discovered by chance. BUI is a front-end framework used by many enterprises to build their own front-end applications. Typically, we prevent XSS by treating all user input as untrusted, escaping it during output, and then passing...