Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion

Zyxel VMG1312-B10D 5.13AAXA.8 is susceptible to local file inclusion. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences /../, conduct directory traversal attacks, and view arbitrary files. id: CVE-2018-19326 info: name: Zyxel VMG1312-B10D...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

Planon <Live Build 41 - Cross-Site Scripting

Planon before Live Build 41 is vulnerable to cross-site scripting. id: CVE-2018-18570 info: name: Planon Live Build 41 - Cross-Site Scripting author: emadshanab severity: medium description: Planon before Live Build 41 is vulnerable to cross-site scripting. impact: | Successful exploitation of th...

Monstra CMS 3.0.4 - HTTP Header Injection

Monstra CMS 3.0.4 is susceptible to HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter. An attacker can potentially supply invalid input and cause the server to allow redirects to attacker-controlled domains, perform cache poisoning, and/or allow improper access to...

joomla-cve-2018-6396

Joomla-CVE-2018-6396 Joomla! 组件 Google Map Landkarten PoC cve-2018-6396...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

external_tcpdump_CVE-2018-14880

tcpdump 如要报告安全问题，请发送电子邮件至 [email protected]。 如要报告错误和其他问题、贡献补丁、请求功能、提供一般反馈等，请参阅 tcpdump 源代码树根目录中的 CONTRIBUTING 文件。 TCPDUMP 4.x.y 现由 “The Tcpdump Group” 维护 参见 www.tcpdump.org 可通过以下方式获取匿名 Git： root@kitploit: git clone git://bpf.tcpdump.org/tcpdump 原先来自 劳伦斯伯克利国家实验室 网络研究组 [email protected]...

napper-for-tpm

root@kitploit: ,----------------, ,---------, ,-----------------------, ," ,"| ," Napper v1.3 for TPM ," | ," ," | +-----------------------+ | ," ," | | .-----------------Z | | +---------+ | | | Z | | | | -==----'| | | | ︶ ︶ z | | | | | | | | - | | |/----| ==== oo | | | | | | | ,/| | ," |...

AppleDOS

AppleDOS CVE-2018-4407 Based on CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, this tweet, and this video. The bug is heap overflow vulnerability in bad packet handling when OS try to send ICMP message containing segments from bad packet back to the sender. This POC will...

CVE-2018-7600

此存储库没有 README。...

uWSGI-CVE-2018-7490-POC

此存储库没有 README。...

CVE-2018-8120

此存储库没有 README。...

remote-bitlocker-encryption-report

remote-bitlocker-encryption-report 此PowerShell脚本以PC列表作为输入，远程获取其BitLocker加密类型，并将列表输出为CSV文件，以帮助缓解CVE-2018-12038漏洞。 防范CVE-2018-12038漏洞 NIST对CVE-2018-12038的描述如下： 该问题影响三星840 EVO和850 EVO设备（仅限“ATA high”模式，“TCG”或“ATA max”模式不受影响）、三星T3和T5便携式驱动器以及Crucial...

CVE-2018-1133-Exploit

CVE-2018-1133-Exploit 此仓库包含用于 Moodle Evil Teacher 漏洞利用（CVE-2018-1133）的 Python 利用脚本。 用法 root@kitploit: usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and exit -u URL, --url URL Target URL -l LOGIN, --login LOGIN Logi...

zip4j

zip4j Este repositorio contiene código fuente descompilado de las versiones 1.3.2 vulnerable y 1.3.3 corregida de la librería zip4j para CVE-2018-1002202, para el dataset CWE-Bench-Java. El repositorio original de zip4j en Github no incluye código de estas versiones. Versiones Versión 1.3.2...

CVE-2017-11882

CVE-2018-11882...

crestron_getsudopwd

crestrongetsudopwd 基于 Ricky Lawshae 在 Crestron TSW-X60 和 MC3 设备上的发现，本工具旨在利用 CVE-2018-13341。通过目标设备的 MAC 地址，你可以恢复隐藏账户 "crengsuperuser" 的密码，该账户拥有提升权限并允许你运行 SUDO 命令。 描述 在 Crestron TSW-X60 （版本低于 2.001.0037.001）和 MC3 （版本低于 1.502.0047.00）设备上，特殊 sudo 账户的密码可以通过普通用户可访问的信息计算得出。攻击者可能破解这些密码，从而执行隐藏的 API...

CVE-2018-9995

此存储库没有 README。...

Nuxeo-CVE-2018-16341

此存储库没有 README。...

CVE-2018-9995-ModifiedByGwolfs

state This tools is an improved version of the CVE-2018-9995 wrote by gwolfs,and is for learning use only。Do not use for illegal purposes，all the consequences resulting from this are your own.The orginal version is wrote by ezelf and is on https://github.com/ezelf/CVE-2018-9995dvrcredentials Than...