128062 matches found
spring-amqp-deserialization
spring-amqp-deserialization A Proof of Concept of Spring AMQP Deserialization Vulnerability CVE-2023-34050 Affected versions: 1.0.0 to 2.4.16 3.0.0 to 3.0.9 Reference: https://spring.io/security/cve-2023-34050...
BlackLotus
BlackLotus BlackLotus aka CVE-2023-24932 remediation scripts for Intune, ConfigMgr, and generic ad-hoc use. Blog post: https://ajf.one/blacklotus General Notes These remediation scripts do NOT initiate any reboots. These are designed to be run "over time", and eventually the device will report as...
CVE-2023-39539-PoC
CVE-2023-39539-PoC PoC for CVE-2023-39539 in Cacti 1.2.22...
POC_Metabase_CVE-2023-38646
For educational purposes only Inspired by Assetnote research CVE: CVE-2023-38646 CVSS: 9.8 Vendor link: click Vulnerable version Metabase Enterprise 1.46 Only tested on ParrotOS Result...
cont-flood-poc
PoC for CVE-2023-45288 This is a proof-of-concept code for the CONTINUATION flood vulnerability found and documented by Bartek Nowotarski. The technical details are very well documented in his blog post here. While my focus was on the Go bug as documented by the researcher, this code should be...
minio_unauth_check
miniounauthcheck CVE-2023-28432, minio information disclosure detection tool This tool is for educational and research purposes only, to improve security awareness and enhance software development practices. Before using this tool, please ensure that you comply with relevant laws and regulations...
MOVEit-CVE-2023-34362
MOVEit-CVE-2023-34362 Repository with everything I have tracking the impact of MOVEit CVE-2023-34362 Includes possibly affected organizations and domains utilizing SFTP header and cookie discovery methods. I've also built a news ticker which tracks new stories about MOVEit, available at...
-Foxit-PDF-CVE-2023-27363-
This repository does not have a README...
CVE-2023-2523
CVE-2023-2523 CVE-2023-2523...
CVE-2023-22518
CVE-2023-22518 Checker for CVE-2023-22518 and CVE-2023-22515 critical vulnerabilities in Confluence. Description This script is designed to check for and exploit vulnerabilities in Atlassian Confluence instances. It checks for the vulnerability CVE-2023-22518, and exploits the vulnerability...
CVE-2023-28588
This repository does not have a README...
cve-2023-20198
cve-2023-20198 Description. 1vere$k POC on the CVE-2023-20198 based on the Blog. Also including a check on hexademical response according to the original Cisco article. The script works in the two modes: check mode which is just makes a connection for the particular URL and checks a response code...
frameworks_base_AOSP-4.2.2_r1_CVE-2023-21272
This repository does not have a README...
CVE-2023-40361
CVE-2023-40361 This vulnerability was discovered and disclosed by myself. This repository will hold the advisory. This repository is only for educational purposes. Links Blog Post Thinking Objects: https://to.com/news/advisory-secudos-qiata-cve-2023-40361 Blog Post SECUDOS GmbH:...
bug-bounty-findings-o-research-disclosures.
bug-bounty-findings-o-research-disclosures. Bug Bounty: CVE-2023-50839 IDOR identified in a third-party support component via 'gau' and 'Nuclei'. Despite perimeter redirects, the outdated software remained exposed. Confirmed through manual header analysis. Severity: 5.3 Medium. Focused on Defense...
CVE-2023-27524
CVE-2023-27524 Tool for finding CVE-2023-27524 Apache Superset - Authentication Bypass...
citrix_cve-2023-4966
citrixcve-2023-4966 Citrix CVE-2023-4966 from assetnote modified for parallel and file handling...
CVE-2023-37772
This repository does not have a README...