winmagic_sd

Informe técnico sobre CVE-2020-11519 y CVE-2020-11520 Fecha: Junio de 2020 Autor: Dennis Elser código: github Tabla de Contenidos Introducción Enfoque y Descripción Técnica CVE-2020-11519 CVE-2020-11520 Explotación de Prueba de Concepto Cronología de Divulgación Solución Sumas de Verificación...

BlueGate-CVE-2020-0609

RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-0610 Remote Validation Tool A small check-only Python utility for remotely validating the patch behavior associated with the Microsoft Remote Desktop Gateway vulnerabilities: CVE-2020-0609 CVE-2020-0610 The vulnerabilities, commonly associate...

webminscan

Webminscan Webmin Exploit Scanner CVE-2020-35606 CVE-2019-12840...

CVE-2020-1971

CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...

cve-2020-14882

cve-2020-14882 Bash script to exploit the Oracle's Weblogic Unauthenticated Remote Command Execution - CVE-2020-14882 Usage ./cve-2020-14882.sh...

covidsafe-CVE-2020-12717-exploit

This repository does not have a README...

boot-jackson-cve

Reproduction of CVE-2020-36518 in Spring Boot 2.5.10 Execute: ./mvnw clean verify It will fail with: ERROR Failed to execute goal org.owasp:dependency-check-maven:7.0.0:check default on project jackson-demo: ERROR ERROR One or more dependencies were identified with vulnerabilities that have a CVS...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 vulnerability reproduction process For detailed process, see: https://blog.csdn.net/mukami0621/article/details/108605941...

CVE-2020-13942-POC-

CVE-2020-13942 POC + Automation Script Steps Step 1 : Enumerate all target subdomains for your fav bug bounty program Step 2 : Put them in the targets.txt file Step 3 : Run the Script Step 4 : If you find a vulnerable target, Dont forget to mention me :...

CVE-2020-7961-POC

CVE-2020-7961-POC All the information provided on this site are for educational purposes only. The site and authors of the repository is no way responsible for any misuse of the information...

Astra Linux – Vulnerability in sane-backends

A out-of-bounds read in SANE backends before version 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, also known as GHSL-2020-083...

Astra Linux – Vulnerability in php-pear

In ArchiveTar version 1.4.11, the Tar.php script allows write operations involving directory traversal, due to insufficient checking of symbolic links. This issue is related to CVE-2020-28948...

CVE-2020-37214

creationtimestamp| type| source ---|---|--- 2026-10-05 11:01:34+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/124c7ca3-bf8e-4967-90d6-a4f3090b771d...

apche_unomi_rce

CVE-2020-13942 Original blog post about the vulnerability: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ There are two RCE vectors: through MVEL injection and through OGNL injection. Both vectors target different code though the payloads look relativel...

ZeroLogon-to-Shell

This is a combination of the zerologontester.py code and the tool evil-winrm to get a shell. I just added a "os.system" to use evil-winrm. Requirements: To get the Administrator NTLM HASH I recommend you to use secretsdump tool from impacket And, of course, you need to install evil-winrm This is...

CVE-2020-24186

chmod +x CVE-2020-24186 ./CVE-2020-24186...

playSMS <1.4.3 - Remote Code Execution

PlaySMS before version 1.4.3 is susceptible to remote code execution because it double processes a server-side template. id: CVE-2020-8644 info: name: playSMS 1.4.3 - Remote Code Execution author: dbrwsky severity: critical description: PlaySMS before version 1.4.3 is susceptible to remote code...

WordPress InfiniteWP <1.9.4.5 - Authorization Bypass

WordPress InfiniteWP plugin before 1.9.4.5 for WordPress contains an authorization bypass vulnerability via a missing authorization check in iwpmmbsetrequest in init.php. An attacker who knows the username of an administrator can log in, thereby making it possible to obtain sensitive information,...

CNVD-2020-10487

creationtimestamp| type| source ---|---|--- 2026-10-03 23:00:18+00:00| seen| Telegram/CgqCbEaEQLXIUq5zmQ0FnVmfcgcKBSsAp2fpfEd3o6h0GKs 2026-10-03 23:00:18+00:00| published-proof-of-concept| Telegram/CgqCbEaEQLXIUq5zmQ0FnVmfcgcKBSsAp2fpfEd3o6h0GKs...

Apache Flink - Local File Inclusion

Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process aka local file inclusion. id: CVE-2020-17519 info: name: Apache Flink - Local File Inclusion author: pdtea...