Jira Netic Group Export <1.0.3 - Missing Authorization

Jira Netic Group Export add-on before 1.0.3 contains a missing authorization vulnerability. The add-on does not perform authorization checks, which can allow an unauthenticated user to export all groups from the Jira instance by making a groupexportdownload=true request to a...

Omnia MPX 1.5.0+r1 - Local File Inclusion

Telos Alliance Omnia MPX Node through 1.5.0+r1 is vulnerable to local file inclusion via logs/downloadMainLog. By retrieving userDB.json allows an attacker to retrieve cleartext credentials and escalate privileges via the control panel. id: CVE-2022-36642 info: name: Omnia MPX 1.5.0+r1 - Local Fi...

uDraw <3.3.3 - Local File Inclusion

uDraw before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the response. As a result, unauthenticated users...

Gitblit 1.9.3 - Local File Inclusion

Gitblit 1.9.3 is vulnerable to local file inclusion via /resources//../ e.g., followed by a WEB-INF or META-INF pathname. id: CVE-2022-31268 info: name: Gitblit 1.9.3 - Local File Inclusion author: 0xAkoko severity: high description: | Gitblit 1.9.3 is vulnerable to local file inclusion via...

WordPress WooCommerce <3.1.2 - Arbitrary Function Call

WordPress WooCommerce plugin before 3.1.2 does not have authorisation and CSRF checks in the wptadminupdatenoticeoption AJAX action available to both unauthenticated and authenticated users, as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary...

spring-rce-poc

spring-rce-poc 测试 CVE-2022-22968 易受 CVE-2022-22968 影响的简单应用 Dockerfile 可用于在存在漏洞的 Tomcat 9.0.59 版本上构建它 exploit.sh 是一个 shell 脚本，尝试在 localhost 的 8080 端口上利用该 CVE 如果使用 exploit.sh 攻击成功，则在目标应用的 http://localhost:8080/shell.jsp 上下文中应可访问 一个带有基本 webshell 的简单 JSP 网站。...

cve-2022-30190-mitigate

This repository does not have a README...

cve-2022-42889-check

Este repositorio no tiene un README...

CVE-2022-4543-EntryBleed

This repository does not have a README...

CVE-2022-30190_page

此存储库没有 README。...

cve-2022-46395-qemu

CVE-2022-46395 QEMU r36p0 Lab This repository contains a QEMU/no-Mali lab for reproducing the portable trigger condition of CVE-2022-46395 against the Arm Mali r36p0 driver lineage. The lab is intended for local vulnerability research and regression testing. It does not carry the Pixel-specific...

CVE-2022-0847-Dirty-Pipe

CVE-2022-0847 Dirty Pipe Pre-compiled exploit for CVE-2022-0847 Dirty Pipe. Original source code from haxx.in/dirtypipe. Build root@kitploit: make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Download Download pre-built binaries from Releases. Supported...

UNISOCUnlocker

UNISOCUnlocker Based of CVE-2022-38694 this adds a simple UI to remove the persist partition, commonly used for FRP IMPORTANT! Do not panic if the device appears to have a black screen. After the script is finished press the power button on the device. It should boot up normally after that. How 2...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 PoC win10 21h2 19044.1620 win11 21h2 22000.593 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

yaml-payload

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

CVE-2022-22720

This repository does not have a README...

ATHDH_CVE_2022_24644

This repository does not have a README...

Sigma-Rule-for-CVE-2022-30190

This repository does not have a README...

CVE-2022-29154

CVE-2022-29154 Authors: Ege BALCI, Taha HAMAD This repository contains the HIP2022 presentation materials for CVE-2022-29154 vulnerability. The full presentation recording is available here but the slides in the video are added later offline by the conference team and it is an old version hence...

ubl-itel-s23

Unlock Bootloader — Itel S23 S665L / Unisoc T606 Guide to unlock the bootloader on the Itel S23 S665L using the CVE-2022-38694 exploit on the Unisoc T606 UMS9230 chipset. Device Info Property| Value ---|--- Brand| Itel Model| S665L S23 Android| 12 SDK 31 Build|...