LPE---CVE-2020-0796

Utilizzo: Assicurati che Python sia installato, poi esegui poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Destinato solo a scopi educativi e di test in ambienti aziendali. MasterSpl0it non si assume alcuna responsabilità per il codice, usalo a tuo rischio. POC riscritto per...

joniles__mpxj_CVE-2020-35460_8-3-4

MPXJ Benvenuti in MPXJ! Questa libreria fornisce una serie di funzionalità che consentono di manipolare le informazioni di progetto in Java, .Net, Ruby e altri linguaggi. La documentazione completa, incluse le note di rilascio, è disponibile online all'indirizzo http://mpxj.org...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Este script escaneia um IP/faixa/CIDR e exibe os Microsoft Exchange Servers e versões descobertas. O IP/faixa/CIDR especificado será escaneado com masscan na porta tcp/443. Após uma varredura bem-sucedida, ele tenta fazer HTTP GET "/owa/auth/logon.aspx" com curl para obter o...

spring-cloud__spring-cloud-config_CVE-2020-5405_2-1-6-RELEASE

//// NON MODIFICARE QUESTO FILE. È STATO GENERATO. Le modifiche manuali a questo file andranno perse quando verrà generato nuovamente. Modifica invece i file nella directory src/main/asciidoc/. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI...

cve-2020-10977

Questo repository non contiene un README...

system_bt_AOSP10_r33_CVE-2020-0463

Stack Bluetooth Fluoride Compilazione ed esecuzione su AOSP Basta compilare AOSP: Fluoride è incluso per impostazione predefinita. Compilazione ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e 16.10 con Clang 3.8.0 Scarica il codice sorgente root@kitploit: mkdir...

CVE-2020-16898-Bad-Neighbor

سياسة بسيطة للكشف عن CVE-2020-16898: الجار السيئ الوظائف التالية التي يوفرها السكريبت :: 1 يتحقق السكريبت من الاستدلال الموصوف هنا: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor/ التثبيت root@kitploit: zeek-pkg install zeek/initconf/CVE-2020-16898-Bad-Neighbor أ...

Zerologon

Zerologon Codice di exploit per CVE-2020-1472, noto come Zerologon...

CitrixADC-CVE-2020-8300

Erkennen Sie die SAML-Aktion oder SAML-iDP-Profil-Konfiguration von Citrix ADC, die anfällig für CVE-2020-8300 ist, mithilfe der Citrix ADC NITRO API BEISPIEL & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" Falls dies für jemanden nützlic...

CVE-2020-14321-modified-exploit

CVE-2020-14321-modified-exploit Original: https://github.com/HoangKien1020/CVE-2020-14321 Modifizierter Moodle-Exploit zur Privilegieneskalation Dorvack root@kitploit: ┌──kali㉿kali-/…/192.168.1.121/exploits/CVE-2020-14321/modified └─$ proxychains python cve202014321.py -url...

cve-2020-5902

cve-2020-5902 Exploit POC root@kitploit: POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specify the loc...

AVideo3xploit

AVideo3xploit.go Exploit RCE per AVideo root@kitploit: root@kali: go get github.com/fatih/color root@kali: git clone https://github.com/ahussam/AVideo3xploit.git root@kali: cd AVideo3xploit root@kali:/AVideo3xploit go run AVideo3xploit.go http://target/avideo/ username password Dovresti ottenere...

CVE-2020-5254

Questo repository non contiene un README...

cve-2020-7799

cve-2020-7799 Rilevamento batch di cve-2020-7799 Aggiungi un file text.txt nella stessa directory Il formato dell'URL nel file è il seguente: www.baidu.com 132.231.132.132 133.12.122.13:8080 Esegui con python3 cve-2020-7799.py Attenzione: È vietato utilizzare tutte le risorse di questo progetto p...

Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting

Jenkins Gitlab Hook 1.4.2 and earlier does not escape project names in the buildnow endpoint, resulting in a reflected cross-site scripting vulnerability. id: CVE-2020-2096 info: name: Jenkins Gitlab Hook =1.4.3 to mitigate this vulnerability. reference: -...

LimeSurvey 4.1.11 - Local File Inclusion

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. id: CVE-2020-11455 info: name: LimeSurvey 4.1.11 - Local File Inclusion author: daffainfo severity: critical...

EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution

EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...

IBM Data Risk Manager - Authentication Bypass via SAML

IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication bypass when configured with SAML authentication. A remote attacker can bypass security restrictions by sending a specially crafted HTTP request to the SAML idpSelection endpoint, allowing them to bypass the...

Artica Proxy Community Edition <4.30.000000 - Local File Inclusion

Artica Proxy Community Edition before 4.30.000000 is vulnerable to local file inclusion via the fw.progrss.details.php popup parameter. id: CVE-2020-13158 info: name: Artica Proxy Community Edition 4.30.000000 - Local File Inclusion author: 0xAkoko severity: high description: Artica Proxy Communi...

Roundcube Webmail - Command Injection

Roundcube Webmail before 1.4.4 contains a command injection caused by shell metacharacters in configuration settings for imconvertpath or imidentifypath, letting attackers execute arbitrary code, exploit requires attacker to control configuration settings. id: CVE-2020-12641 info: name: Roundcube...