128061 matches found
VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC
VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC This is my malware. I use the CVE 2023-38831, a kind of exploit on WinRAR, to do this malware. I also use BypassUAC to get Administrator authority. This is the OVA file of it:...
CVE-2023-1829
CVE-2023-1829 The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 Installing dependences for some netlink filter functions sudo apt install libnftnl-dev libmnl-dev Building step: make References https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main...
Cve-2023-28432-
Cve-2023-28432 Implemented basic batch detection through the vulhub reproduction process. It's quite crappy but barely usable. vulhub link https://github.com/vulhub/vulhub/tree/master/minio/CVE-2023-28432 Instructions: Create a new tagerts.txt file and put the minIO API port links into it. Just r...
CVE-2023-7028
CVE-2023-7028: CVE-2023-7028 Exploitation Tool Description: This Python script automates the exploitation of a hypothetical security vulnerability CVE-2023-7028 on GitLab instances. It facilitates password reset attacks on specified target email addresses, demonstrating a potential security risk...
CVE-2023-1773-Exploit
CVE-2023-1773-Exploit...
CVE-2023-2640-CVE-2023-32629-Interactive-PoC
CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...
SUDO-privilege-escalation
SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...
CVE-2023-35813
CVE-2023-35813 - Sitecore RCE...
CVE-2023-31433
This repository does not have a README...
CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability
This repository does not have a README...
CVE-2023-25234_Tenda_AC6_stack_overflow
This repository does not have a README...
SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation
SOC227 - Microsoft SharePoint Server Elevation of Privilege CVE-2023-29357 Exploitation CVE-2023-29357 is a critical privilege escalation vulnerability that, when combined with other vulnerabilities, could potentially lead to remote code execution. The CVSS score for this vulnerability is 9.8...
CVE-2023-2255
This repository does not have a README...
Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-
This repository does not have a README...
CVE-2023-50131
This repository does not have a README...
frameworks_base_AOSP10_r33_CVE-2023-21097
This repository does not have a README...
CVE-2023-22551
CVE-2023-22551 Reproduce CVE-2023-22551...
HTTP-Request-for-PHP-object-injection-attack-on-CVE-2023-41892
This type of attack attempts to exploit the PHP application's deserialization process to execute arbitrary code or carry out unintended actions on the server. Mitigation Strategies To defend against PHP object injection and similar attacks, consider the following strategies: Disable PHP Object...
discourse-CVE-2023-45806
yksivaihde-CVE-2023-45806 CVE: https://github.com/discourse/discourse/security/advisories/GHSA-hcgf-hg2g-mw78 Patch: https://github.com/discourse/discourse/commit/7d484864fe91ff79c478f57e7ddb1235d701921e usage: fixquoteattribution"Username|", , where "Username|" is the unique search string within...
POC-exploit-for-Dolibarr
POC exploit for Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost...