14465 matches found
Redis-RCE
redis-rce Redis 4.x/5.x RCE Usage usage: redis-rce.py -h -r RHOST -p RPORT -L LHOST -P LPORT -f FILE -a AUTH -v Redis 4.x/5.x RCE with RedisModules optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST target host -p RPORT, --rport RPORT target redis port, default...
CVE-2024-31719----AMI-Aptio-5-Vulnerability
AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...
Laravel-vul
Laravel-vul A POP chain discovered during personal audit of Laravel 5, Vulnerability ID: CVE-2021-43503 Details see issues...
CVE-2017-1000486
CVE-2017-1000486 Proof of Concept Exploit for PrimeFaces 5.x EL Injection CVE-2017-1000486, a RCE vulnerability that can be used to gain Remote Code Execution on a target. Vulnerability description You can find an excellent description of the vulnerability on the Minded Security blog. Usage The...
ghostlock-myron-tw
GhostLock for POCO F8 Ultra / REDMI K90 Pro Max — Global & Taiwan Variant myron, WPMTWXM GhostLock CVE-2026-43499 kernel exploit port for the global/Taiwan firmware of the POCO F8 Ultra / REDMI K90 Pro Max codename myron, Snapdragon 8 Elite Gen 5 / SM8850. Target : HyperOS OS3.0.6.0.WPMTWXM —...
CVE-2019-16759
CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...
vxworks_hash
vxworkshash code to reverse vxworks 5.x password hashes This is really old now! : See my blog post for more info: http://cvk.posthaven.com/how-to-crack-vxworks-password-hashes...
Metaphor
Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! The source include a PoC that generat...
HashcatRosetta
| | | | | | | || \ | || | | || |/ / | ' \ / / | | | / / |/ \ | / | | | | \ \ | | | | | | || \ \ / || || | | || ||,|/| ||\,||| \/|/||\,| Decode the Rosetta Stone of Password Cracking Rules HashcatRosetta A Python project designed to analyze hashcat debug mode 4 and mode 5 output files to...
CVE-2024-30956
CVE-2024-30956 cf https://www.lauyan.com/en/toweb-updates.htmliyFEw37D DOM-based XSS HTML Injection vulnerability in TOWeb version 5 eg http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP navigate to the url, the JS code is executed PS: src contains a copy ...
xperia_5_bl_unlocker_poc
Can't use as is, since memory address maybe different for each device This is for archival purposes...
PS2EXE
AI free repository - artificial intelligence is killing creativity and our nature! PS2EXE Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. Compiles only Powershell 5.x compatible...
drupal-oembed-ssrf
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · drupal-oembed-ssrf drupal-oembed-ssrf Class: SSRF Reach: Remote Drupal core 11.4.8 61044508 - Drupal SA-CORE-2026-008 gated the discovery document host with mediaoembeddiscoverytrustedhostpatterns. UrlResolver::findUr...
CVE-2026-98878
A flaw was found in the Linux kernel's Generic Interrupt Controller version 5 GICv5 driver. The driver delayed dropping an interrupt's priority until full deactivation rather than immediately after acknowledging it. When an interrupt remains active during a long-running operation or guest virtual...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
pivotnacci
pivotnacci Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which communicates with HTTP agents. The architecture looks like the following: This tool was inspired by the great reGeorg. However, it includes some improvements: Support for...
CVE-2014-7911poc
CVE-2014-7911 POC for CVE-2014-7911 for Nexus5 Android 4.4.4r1 based on retme7 and auo, use different rop chain Info Usage launch this poc, click the “CVE-2014-7911” button, you will see a pwn.txt created by system user in /data:...
CVE-2024-25153
CVE-2024-25153 This is a proof of concept for CVE-2024-25153, a Remote Code Execution vulnerability in Fortra FileCatalyst Workflow 5.x, before 5.1.6 Build 114. Full technical details can be found at https://labs.nettitude.com/blog/cve-2024-25153-remote-code-execution-in-fortra-filecatalyst Usage...
weape
wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Auto extracts EAP 802.1x user names Developed by Daniel Compton at Info-Assure Ltd https://github.com/commonexploits/weape.git Installing git clone https://github.com/commonexploits/weape.git How To Use...