CVE-2019-6447-ESfile-explorer-exploit

Exploit do ES File Explorer CVE-2019-6447 Exploit da vulnerabilidade de porta aberta do ES File Explorer v4.1.9.7.4. CVE-2019-6447 Créditos a quem encontrou a vulnerabilidade real...

OsirisJailbreak12

OsirisJailbreak12 iOS 12.0 - 12.1.2 كسر حماية غير مكتمل باستخدام CVE-2019-6225 كسر حماية iOS 12 غير مكتمل. في الوقت الحالي، يقوم فقط بتشغيل الاستغلال exploit، الحصول على tfp0، الحصول على ROOT، الهروب من SandBox، كتابة ملف اختبار لإثبات الهروب من الصندوق الرملي ثم إعادة التشغيل resprings. لا تتردد...

Docker-breakout-runc

Escape de contêiner Docker via runc Originalmente de: https://github.com/Frichetten/CVE-2019-5736-PoC. Este repositório é apenas eu mexendo com o PoC e tentando entender o fluxo do exploit...

dirty_sock

dirtysock Lokale Privilegienausweitung via snapd CVE-2019-7304 Remastered PoC-Exploit Die Anerkennung gebührt initstring. Original dirtysock. Verwendung Warten Sie 40 Sekunden, bevor Sie das Skript erneut ausführen, sonst funktioniert es nicht. root@kitploit: chmod u+x lpe.py ./lpe.py...

Docker-Escape-Miner

Usando um exploit Docker publicado para obter acesso root e executar um script de mineração de bitcoin Isto usa duas bibliotecas de código aberto: nightminer por @ricmoo para mineração de bitcoin em python RunC-CVE-2019-5736 por @twistlock para o escape do docker Requisitos do Sistema Isto foi...

bluekeep-metasploit-lab-project

Windows 7 पर BlueKeep CVE-2019-0708 का शोषण उद्देश्य Metasploit का उपयोग करके BlueKeep RDP भेद्यता के माध्यम से एक अपैच्ड Windows 7 सिस्टम तक दूरस्थ पहुँच प्राप्त करना। प्रयोगशाला सेटअप हमलावर: Kali Linux लक्ष्य: Windows 7 अपैच्ड, RDP सक्षम नेटवर्क: NAT / Host-Only उपयोग किए गए उपकरण Metasploit...

snap_priv_esc

snapprivesc Outra implementação para exploit de escalação de privilégio no Linux via snapd CVE-2019-7304 O que é snap? Snap é um sistema de empacotamento e implantação de software desenvolvido pela Canonical para os sistemas operacionais que usam o kernel Linux. Os pacotes, chamados snaps , e a...

ko7demo

A docker-contained https://github.com/koseven/kosevenkoseven hello world to play with CVE-2019-8979, a SQL injection vulnerability affecting versions 3.3.10. هذا الـ Hello World يأتي في الواقع من https://koseven.dev/documentation/orm/examples/simpleالتوثيق، لقد أضفت فقط أجزاء دوكر واكسبلويت الإثب...

chakra-exploit-framework

Chakra Exploitation Framework Este repositório contém o Browser Exploitation Framework que escrevi para me preparar para o meu curso EXP-401. O framework tem como alvo o mecanismo Chakra, que fazia parte do Edge até a sua mudança para o v8 em 2019. A vulnerabilidade de demonstração usada no...

django_cve_2019_19844_poc

djangocve201919844poc PoC для CVE-2019-19844 Требования Python 3.7.x PostgreSQL 9.5 или выше Установка 1. Создайте базу данных например, djangocve201919844poc 2. Задайте имя базы данных через переменную окружения DJANGODATABASENAME например, export DJANGODATABASENAME=djangocve201919844poc 3...

CVE-2019-9670

Abzeichen Lizenz MIT Installation 1. Installieren Sie Python3 und pip Anleitung hier Wenn Sie das nicht hinbekommen, sollten Sie dieses Tool eigentlich nicht verwenden Installation über pip root@kitploit: pip install CVE-2019-9670 Führen Sie den folgenden Befehl zur Überprüfung aus CVE-2019-9670 ...

inetutils-CVE-2019-0053-Patched-PKGBUILD

O inetutils não é atualizado há 5 anos, e o pacote oficial do Arch também não. Um patch foi lançado que aborda o CVE-2019-0053 exploração de estouro de buffer devido ao uso de sprintf em vez de snprintf, mas não há nenhum lançamento oficial à vista. Sinceramente, há muito mais errado em usar teln...

DecryptTeamViewer

DecryptTeamViewer Nutzt CVE-2019-18988, um TeamViewer-Anmeldedaten aus der Windows-Registry aufzulisten und zu entschlüsseln. Sicherheitsforschung von Nic Losby. Blogbeitrag mit Details zur Sicherheitslücke: https://whynotsecurity.com/blog/teamviewer/ Verwendung .\DecryptTeamViewer.exe...

Dockerized-CVE-2019-14287

Dockerisiertes CVE-2019-14287 Containerisierte und bereitstellbare Nutzung der Schwachstelle CVE-2019-14287. Weitere Informationen in README.md. Dieses CVE betrifft alle Versionen von sudo unter 1.8.28 , bei denen ein sudo-Benutzer durch Referenzierung seiner Benutzer-ID zu root eskalieren kann...

OpenEMR <5.0.2 - Local File Inclusion

OpenEMR before 5.0.2 is vulnerable to local file inclusion via the fileName parameter in custom/ajaxdownload.php. An attacker can download any file that is readable by the web server user from server storage. If the requested file is writable for the web server user and the directory...

LiveZilla Server 8.0.1.0 - Cross-Site Scripting

LiveZilla Server 8.0.1.0 is vulnerable to reflected cross-site scripting. id: CVE-2019-12962 info: name: LiveZilla Server 8.0.1.0 - Cross-Site Scripting author: Clment Cruchet severity: medium description: | LiveZilla Server 8.0.1.0 is vulnerable to reflected cross-site scripting. impact: |...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting

Rumpus FTP Web File Manager 8.2.9.1 contains a reflected cross-site scripting vulnerability via the Login page. An attacker can send a crafted link to end users and can execute arbitrary JavaScript. id: CVE-2019-19368 info: name: Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting author:...

IceWarp Mail Server <=10.4.4 - Local File Inclusion

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal. id: CVE-2019-12593 info: name: IceWarp Mail Server =10.4.4 - Local File Inclusion author: pikpikcu severity: high description: | IceWarp Ma...

Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation

The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...