CMS-Made-Simple-2.2.10---SQL-Injection

CMS-Made-Simple-2.2.10---SQL-Injection Google Dorks for detecting CMS Made Simple 2.2.10 SQL Injection CVE-2019-9053. Built for security auditing and patch verification...

PwnKit-CVE-2021-4034

PwnKit-CVE-2021-4034...

CVE-2023-27163-ssrf-to-port-scanning

This repository does not have a README...

CVE-2026-44648

CVE-2026-44648 PoC and advisory for CVE-2026-44648...

mc-log4j-patcher

mc-log4j-patcher Replaces old vulnerable - CVE-2021-44228 Log4j2 version with the latest one 2.15.0 that contains the JNDI RCE fix. Tested on Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 This is intended to fix servers that are currently unsupported, such as PaperSpigot 1.8.8 Please check...

Dos-exploit-

Dos-exploit- CVE-2025-31650 Exploit Title: Apache Tomcat 10.1.39 - Denial of Service DOS Author: Abdualhadi khalifa CVE: CVE-2025-31650 import httpx import asyncio import random import urllib.parse import sys import socket from colorama import init, Fore, Style init class TomcatKiller: def...

proxynotshell-IOC-Checker

proxynotshell-IOC-Checker Powershell script used to check for IOC's for CVE-2022-41040 and CVE-2022-41082 based on community research and Microsoft: GTESC The Sec Master Double Puslar Microsoft Security Resource Center Microsoft Security Blog The script may be updated to include more IOC's as mor...

Exploits

This repository contains a personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits. Some of these CVE have been joined together in exploit chains for RCE, sandbox escapes and privilege...

exploit-CVE-2016-9920

Roundcube 1.0.0 = 1.2.2 Remote Code Execution Roundcube is a widely distributed open-source webmail software used by many organizations and companies around the globe. The mirror on SourceForge, for example, counts more than 260,000 downloads in the last 12 months which is only a small fraction o...

packages_apps_PackageInstaller_AOSP10_r33_CVE-2021-0302

This repository does not have a README...

CVE-2024-4956

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-4956 Run bellow command to check CVE-2024-4956 -h Configurations 2. We integrated with the Telegram API to receive...

NotProxyShellScanner

NotProxyShellScanner Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082. Setup Install the requirements all that's required is python3 requests. pip3 install -r requirements.txt Running There are a few options when it comes to running the tooling: usage: NotProxyShell.py ...

CVE-2022-46169

CVE-2022-46169 Exploit for cacti version 1.2.22, CVE-2022-46169 Usage $ python3 cacti.py...

CVE-2019-19781

CVE-2019-19781 Automated script for Citrix ADC scanner CVE-2019-19781 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubuntu &...

CVE-2021-21985

CVE-2021-21985...

CVE-2023-30190-FOLLINA

CVE-2023-30190-EXPLOIT.py...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secretkey found in the defaults.i...

log4j-CVE-2021-44228

Apache Log4j Zero Day aka Log4Shell aka CVE-2021-44228 Introduction Reproducing the problem in k8s env Setting up k8s env with the vulnerability Possible Solutions KubeArmor Security Policy Not allowing any execs from the JVM/Java Default Deny based rules KubeArmor Visibility/Observability into t...

watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

CVE-2025-34028 A Commvault Pre-Authenticated Remote Code Execution Proof of Concept See our blog post for technical details Detection in Action python watchtowr-vs-commvault-rce-CVE-2025-34028.py --url https://192.168.1.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / |...

Fastgate

TLDR This is a brief report of a vulnerability CVE-2019-12489 discovered playing around with a Fastgate modem/router of Fastweb and Ghidra. The vulnerability allow the execution of a command injection through an http request and can be used to enable an SSH shell. Firmware collection and extracti...