68551 matches found
Multi-threaded-mass-exploiter-CVE-2018-13379-POC
CVE-2018-13379 — Mass Exploit for Fortinet FortiOS SSL VPN A tool for mass exploitation of the CVE-2018-13379 path traversal vulnerability in Fortinet FortiOS SSL VPN. Allows reading session files and extracting logins and passwords in cleartext. Features Exploitation of CVE-2018-13379 via the...
CVE-2018-6574
This repository does not have a README...
Zoho ManageEngine OpManager - SQL Injection
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...
Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion
Zyxel VMG1312-B10D 5.13AAXA.8 is susceptible to local file inclusion. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences /../, conduct directory traversal attacks, and view arbitrary files. id: CVE-2018-19326 info: name: Zyxel VMG1312-B10D...
uWSGI PHP Plugin Local File Inclusion
uWSGI PHP Plugin before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, making it susceptible to local file inclusion. id: CVE-2018-7490 info: name: uWSGI PHP Plugin Local File Inclusion author: madrobot severity: high description: uWSGI PHP Plugin before 2.0.17...
uWSGI-CVE-2018-7490-POC
This repository does not have a README...
CVE-2018-8120
This repository does not have a README...
CVE-2018-9995
This repository does not have a README...
CVE-2018-16987
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:05+00:00| seen| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI 2026-09-15 00:00:31+00:00| published-proof-of-concept| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI...
CVE-2018-3810_exploit
This repository does not have a README...
CVE-2018-12636_exploit
This repository does not have a README...
cve-2018-9948-9958-exp
2018-9948-9958-exp "getshellcodefrommsf.py" is a python script to get shellcode from msfvenom, then copy the output to the exp.pdf replace the 'calc' shellcode block, and finally it works. Ooooops, it's a tcp reverse shellcode. a sample code is like this: python getshellcodefrommsf.py 192.168.1.7...
CVE-2018-12418
This repository does not have a README...
CVE-2018-2628
CVE-2018-2628 CVE-2018-2628 Vulnerability Toolkit Vulnerability exploit tools compiled from Github include: 1.CVE-2018-2628 Vulnerability Detection Tool // POC for vulnerability existence detection 2.weblogicpoc.py // POC for exploit 3.ysoserial-0.1-cve-2018-2628-all.jar // Reference exploit tool...
external_zlib_AOSP10_r33_CVE-2018-25032
This repository does not have a README...
cve-2018-14667
cve-2018-14667 POC for CVE-2018-14667 Original analysis and POC: https://paper.seebug.org/765/ Ref: https://web.archive.org/web/20190501081357/https://tint0.com/when-el-injection-meets-java-deserialization/...
fusee-gelee
fusee-gelee An implementation of the Fusee Gelee exploit CVE-2018-6242 for the Nintendo Switch, based on the vulnerability disclosed by Kate Temkin / ReSwitched in March 2018. Launches an arbitrary payload e.g. hekate on a Tegra X1 device in USB Recovery Mode RCM, bypassing the boot ROM's signatu...
CVE-2018-0802_POC
CVE-2018-0802POC usage: cve-2018-0802poc.py -h -e EXECUTABLE -o OUTPUT The .rtf sample exploit the vulnerability to execute the calculator...
Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-
This script targets the Nexus Repository Manager 3 EL injection vulnerability CVE-2018-16621, and performs one-click exploitation to get a reverse shell. Running Example: Run the script on the attacker machine, enter the target IP, port, local listener IP and port as prompted, then execute the...
oracle-oam-authentication-bypas-exploit
Oracle Access Manager OAM Authentication Bypass Exploit Introduction Exploiting Oracle Access Manager OAM padding oracle vulnerability CVE-2018-2879 to perform authentication bypass and login to any web app protected by OAM using valid username. This exploit is based on OAM padding oracle...