93744 matches found
CVE-2020-1938_Ghostcat-PoC
CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability CVE-2020-1938 with advanced features for penetration testing and security research. 🔍 Overview The Ghostcat vulnerability CVE-2020-1938 allows attackers to read arbitrary files fr...
node-prompt-here
node-prompt-here This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2020-7602 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE...
CVE-2020-25213
This repository does not have a README...
frameworks_av-CVE-2020-0242_CVE-2020-0243
This repository does not have a README...
Cacti v1.2.8 - Remote Code Execution
Cacti v1.2.8 is susceptible to remote code execution. This vulnerability could be exploited without authentication if "Guest Realtime Graphs" privileges are enabled. id: CVE-2020-8813 info: name: Cacti v1.2.8 - Remote Code Execution author: gy741 severity: high description: Cacti v1.2.8 is...
VMware vCenter Server LDAP Broken Access Control
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls. id: CVE-2020-3952 info: name: VMware vCenter Server LDAP Broken Access Control author: 0xAkoko severity: critic...
Tenda AC15 AC1900 version 15.03.05.19 - Command Injection
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. id: CVE-2020-10987 info: name: Tenda AC15 AC1900 version 15.03.05.19 - Command Injection author: pussycat0x severity: critical...
smbghost
SMBGhost Scanner CVE-2020-0796 SMBv3 vulnerability scanner SMBGhost. Detects vulnerable Windows hosts by sending a malformed SMBv3 negotiation packet and checking the response. Usage Single host python3 scanner.py -H 10.0.0.5 Host list python3 scanner.py -l targets.txt Network segment python3...
CVE-2020-7961
This repository does not have a README...
Tomcat-AJP-CVE-2020-1938
This project is based on 00theway's modified version...
openjpeg-2.3.0_CVE-2020-27824
OPENJPEG Library and Applications What is OpenJPEG ? OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is...
Settings_10-r33_CVE-CVE-2020-0219
This repository does not have a README...
Settings_10-r33_CVE-2020-0394
This repository does not have a README...
ghostcat
Ghostcat - CVE-2020-1938 Exploit Read Tomcat files via AJP connector port 8009 Usage: python3 ghostcat.py file """ Save the script cat ghostcat.py 'PYEOF' AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA PYEOF Set permissions and run chmod +x ghostcat.py Read tomcat-users.xml Tomcat Manager credentials pytho...
cve-2020-1048
This repository does not have a README...
ROOT-APP-NPM-CVE-2020-8131 CVE-2020-8131 in yarn - Patched by Root
Root has patched CVE-2020-8131 in the yarn package for Root:npm. Multiple fixed versions available...
CVE-2020-14294
CVE-2020-14294 Esta vulnerabilidad fue descubierta y divulgada por mí. Este repositorio contendrá el aviso de seguridad. Este repositorio es solo con fines educativos. Enlaces Aviso SYSS-2020-024 Informe detallado Entrada del blog de SySS Aviso del proveedor Entrada de MITRE Entrada de NVD...
zerologon
Zerologon test for SMB & RPC A python script based on SecuraBV script. Demonstrates that CVE-2020-1472 can be done via RPC/SMB, and not only over RPC/TCP. Additionaly, there is a random byte in the final client challange & client credential - to test against trivial IDS signatures. The RPC/SMB sc...
cve-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...