140314 matches found
DirtyPipePython
dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...
dirtypipez-exploit
Exploit DirtyPipe CVE-2022-0847. Crédito: Max Kellermann [email protected] Una nueva vulnerabilidad de Linux conocida como 'Dirty Pipe' permite a usuarios locales obtener privilegios de root a través de exploits disponibles públicamente. Hoy, el investigador de seguridad Max Kellermann divul...
dirtypipez-exploit
CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann [email protected] A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe'...
CVE-2022-41333
CVE-2022-41333 https://medium.com/@0xpolar/cve-2022-41333-71eb289d60b5...
CVE-2023-28252-Compiled-exe
CVE-2023-28252-Compiled-exe A modification of Fortra's excellent CVE-2023-2852 Privesc Exploit. Works on Windows 11 21H2 clfs.sys version 10.0.22000.1574 - also works on Windows 10 21H2, Windows 10 22H2, Windows 11 22H2 and Windows server 2022. This version retains the original functionality, but...
Spring4Shell-CVE-2022-22965.py
Spring4Shell-CVE-2022-22965.py Script para comprobar la vulnerabilidad Spring4Shell Probado en https://github.com/lunasec-io/Spring4Shell-POC/blob/master/Dockerfile...
magento2-template-filter-patch
Parche del Filtro de Plantillas de Magento 2 para CVE-2022-24086, CVE-2022-24087 Parche de Magento 2 para CVE-2022-24086, CVE-2022-24087. Corrige la vulnerabilidad RCE y los errores relacionados mediante un escape profundo de variables de plantilla. Si no puede actualizar Magento o no puede aplic...
CVE-2022-44118-Exploit
This repository does not have a README...
CVE-2022-28368-handler
CVE-2022-28368-handler Este repositorio contiene un script de Python que manejará la mayor parte del exploit de fuente cacheada de dompdf CVE-2022-28368, solo necesitas crear la solicitud. Incluso proporcionará una cadena de activación para iniciar el exploit : Usage root@kitploit: usage:...
exploit-CVE-2022-36779
authenticated Command Injection for CVE-2022-36779 enjoy :...
apache__uima-uimaj_CVE-2022-32287_3-3-0
Welcome to the Apache UIMA Java SDK Apache UIMA helps you managing unstructured data such as texts that is enriched useful information. For example, if you want to identify a mention of an entity in a text or possible link that entity to a reference dataset, then Apache UIMA provides: a convenien...
Block-Spring4Shell
Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...
imagemagick-lfi-poc
ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for resize, the resulting image could have embedded the content of an arbitrary remote file if the...
CVE-2022-30190-Analysis-With-LetsDefends-Lab
CVE-2022-30190-Analysis-With-LetsDefends-Lab On May 27, 2022, the NaoSec technical team attempted to analyze and discovered a document in .doc format that appeared malicious. The document was indicated to have been uploaded from an IP address in Belarus. This suspicion was further traced and on M...
springhound
springhound Created after the release of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and systems, allowing you to get insight on versions used. Unpacks JARs and analyzes their Manifest files. Usage: ./springhound.sh rootdirectory...
packages_apps_Bluetooth_AOSP10_r33_CVE-2022-20126
此存储库没有 README。...
riskootext4shell
riskootext4shell text4shell script for Apache Commons Text =1.10 CVE-2022-33980 The Apache Commons Text library is an alternative to the native functionalities of the Java JDK. Versions prior to version 1.10.0 of Apache Commons Similar to CVE-2022-33980 root@kitploit: python3 text4shell.py -u...
follina-CVE-2022-30190
follina-CVE-2022-30190 por hazard...
jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706-vd43c65dec013
Pipeline: Multibranch Introduction Enhances Pipeline plugin to handle branches better by automatically grouping builds from different branches. Automatically creates a new Jenkins job whenever a new branch is pushed to a source code repository. Other plugins can define various branch types, e.g. ...