CVE-2020-16898_Workaround

CVE-2020-16898Workaround PowerShell Script Workaround for VCE-220-16898 vulnerability...

Block-Spring4Shell

Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...

vulnerabilidad-LibWebP-CVE-2023-41064

vulnerability-LibWebP-CVE-2023-41064 code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP an image format file with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...

BootHoleFix

Boot Hole Fix This script will remediate the BootHole bug identified in CVE-2020-25632 and/or CVE-2021-20233. On July 29, 2020, Microsoft published security advisory 200011 that describes a new vulnerability that's related to Secure Boot. Devices that trust the Microsoft third-party Unified...

CVE-2024-6387-Mitigation

Document Title - Mitigation Guide for CVE-2024-6387 in OpenSSH Introduction This document outlines the steps for mitigating CVE-2024-6387, a security vulnerability affecting OpenSSH versions from 8.5p1 to 9.8p1. The vulnerability can be mitigated in two ways: 1. Adjusting the LoginGraceTime setti...

SmartAsset-UE-CVE-2020-26526

SmartAsset-UE-CVE-2020-26526 It is possible to enumerate valid usernames on the login page. CVE-2020-26526 An issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid usernames on the login page. The application sends a different server response when the username is...

CVE-2017-11882-Preventer

CVE-2017-11882-Preventer Chrome Extension CVE-2017-11882 Preventer for .docx files...

CVE-2022-30190-Analysis-With-LetsDefends-Lab

CVE-2022-30190-Analysis-With-LetsDefends-Lab On May 27, 2022, the NaoSec technical team attempted to analyze and discovered a document in .doc format that appeared malicious. The document was indicated to have been uploaded from an IP address in Belarus. This suspicion was further traced and on M...

springhound

springhound Created after the release of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and systems, allowing you to get insight on versions used. Unpacks JARs and analyzes their Manifest files. Usage: ./springhound.sh rootdirectory...

CVE-2024-4577_Analysis

CVE-2024-4577 Analysis Above is my analysis report, besides, there are also information about: - Webserver Apache configuration - Debugger for PHP Documents for my report: https://nvd.nist.gov/vuln/detail/CVE-2024-4577...

apche-struts-vuln-demo-cve-2018-11776

Apache Struts Vulnerability Demo CVE-2018-11776 Description Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776. Getting Started To bring up the test environment, run the following command: root@kitploit: aws cloudformation create-stack ...

CVE-Research

TryHackMe Room - tryhackme.com/jr/cvechallenge Video -...

jetty-9.4.31.v20200723_CVE-2023-26049

This repository does not have a README...

cve-2024-38063

This repository does not have a README...

CVE-2025-4686

CVE-2025-4686 The official publication by USOM is expected...

TimeInjector

TimeInjector Time injector is a CVE-2018-14714 exploitation script in bash To tell if the target is vulnerable, the script works by first checking if the target is accessible and if it can establish a login session. After that, it checks for the existence of specific pages and performs a time-bas...

CVE-2021-28165

This repository does not have a README...

lab_CVE-2025-32433

This repository does not have a README...

CVE-2024-32002-POC

CVE-2024-32002-POC...

CVE-2020-7384

CVE-2020-7384 This is an exploit made in bash for CVE-2020-7384. It is a modification of nikhil1232's code here: https://github.com/nikhil1232/CVE-2020-7384/blob/main/CVE-2020-7384.sh My goal was to make the exploit easier to run, along with adding a few QOL improvements. Usage bash CVE-2020-7384...