1467306 matches found
django_cve_2019_19844_poc
djangocve201919844poc PoC for CVE-2019-19844 Requirements Python 3.7.x PostgreSQL 9.5 or higher Setup 1. Create databasee.g. djangocve201919844poc 2. Set the database name to the environment variable DJANGODATABASENAMEe.g. export DJANGODATABASENAME=djangocve201919844poc 3. Run pip install -r...
CVE-2026-55040
CVE-2026-55040 Exploit code for CVE-2026-55040, it can create auth header for any validate account. Details at: https://blog.viettelcybersecurity.com/sharepoint-cve-2026-55040/...
Spring4Shell
Spring4Shell In this challenge, I analyzed the Spring4Shell CVE-2022-22965 vulnerability, investigated security bypasses, and wrote an Incident Postmortem Report detailing the detection, impact, and resolution of the attack. I also implemented a firewall rule in Python to block malicious requests...
CVE-2020-17530
CVE-2020-17530 Struts2 S2-061 Remote Command Execution Vulnerability CVE-2020-17530 Usage: python CVE-2020-17530.py -u url python CVE-2020-17530.py -f file.txt python CVE-2020-17530.py -f file.txt -o outfile.txt python CVE-2020-17530.py -f file.txt -p socks5://127.0.0.1:7890 python...
ActiveMQ_CVE-2023-46604
ActiveMQCVE-2023-46604 Python implementation for rapidly constructing concurrent data traffic packets; both gadget classes are implemented, org.springframework.context.support.FileSystemXmlApplicationContext and org.springframework.context.support.ClassPathXmlApplicationContext, FileSystemXml can...
CVE-2022-24990-TerraMaster-TOS--PHP-
This repository does not have a README...
linux-kernel-zero-day-mitigation-zero-downtime-kernel-defense-
Zero-Downtime Linux Kernel Zero-Day Defense: Layered Compensating Controls via eBPF Telemetry, Module Disarmament, and User Namespaces -black?style=flat-square When the Cybersecurity and Infrastructure Security Agency CISA adds critical Linux kernel vulnerabilities to its Known Exploited...
YellowKey-WinRE-Remediation
YellowKey WinRE Remediation Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes autofstx.exe from the offline WinRE image's BootExecute value and refreshes WinRE registration so BitLocker trust is...
CVE-2019-0708
New vuln exploit...
ExpStruts
ExpStruts ExpStruts is a php-based mass exploiter for CVE-2017-5638 .. Screenshots ā ļø Requirements Python3 for MakMan's Google Scraper Abk Khan @asystolik...
packages_apps_Settings_CVE-2020-0201
This repository does not have a README...
CVE-2014-1266-poc
OS X/iOS SSL Flaw POC Overview This repository contains some Go code that demonstrates the recently discovered SSL verification vulnerability in iOS and OS X. Apple Update Announcement Adam Langley's writeup Usage $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd CVE-2014-1266-po...
cve-2018-8120
cve-2018-8120 Details see: http://bigric3.blogspot.com/2018/05/cve-2018-8120-analysis-and-exploit.html...
CVE-2025-1974-go
Exploit CVE-2025-1974 with a single file. Usage: 1. change serverip and serverport in shell.c 2. make 3. GOOS=linux go build -ldflags="-w -s -extldflags "-static"" -trimpath main.go 4. run main in your controlled pod...
CVE-2019-1653
CVE-2019-1653 NSE script to scan for Cisco routers vulnerable to CVE-2019-1653 Usage: nmap --script cve20191653 -p 443...
omigod-lab
Readme An educational lab VM to learn about the 9.6 CVSS unauthenticated Remote Code Execution RCE vulnerability in Open Management Infrastructure software CVE-2021-38647. Disclosure original research: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure OMI source code:...
Belsen_Group-et-exploitation-de-la-CVE-2022-40684
BelsenGroup and exploitation of CVE-2022-40684 Context On January 29, 2025, a user of the cybercriminal forum BelsenGroup published a message claiming to hold 15,000 compromised Fortinet devices, with configuration files and VPN passwords. He now offers 1,000 exclusive targets for sale on the dar...
CVE-2026-33017-PoC
This repository does not have a README...
android_autorooter
Android Autorooter This is just a mental note more than anything to further explore the posibilities of the work done here: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...