CVE-2022-29078

CVE-2022-29078 Simple PoC for CVE-2022-29078 vuln ejs 3.1.6 Usage git clone https://github.com/chuckdu21/CVE-2022-29078.git cd CVE-2022-29078 python3 CVE-2022-29078.py A prompt will appear to execute commands $ id uid=0root gid=0root groupes=0root...

cve-2022-22947-spring-cloud-gateway

Vulnerability Overview Spring Cloud Gateway is a new project under Spring Cloud, built on Spring 5.0, Spring Boot 2.0, and Project Reactor. It aims to provide a simple and effective unified API routing management method for microservice architectures. Recently, Spring Cloud Gateway was reported t...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Usage: python3 cve-2024-29895.py -u https://target.com/ -c id Affecting Cacti versions 1.3.X on DEV builds where cmdrealtime.php is present and POLLERID is enabled. Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query...

CVE-2023-38831_ReverseShell_Winrar-RCE

OBTAINING A REVERSE SHELL BY EXPLOITING THE WINRAR VULNERABILITY CVE-2023-38831 In this repository we are going to exploit the WinRAR vulnerability CVE-2023-38831 in order to obtain a reverse shell from the victim Windows machine to the attacker Kali Linux machine. PRELIMINARY STEPS Download the...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...

cve-2019-14540-exploit

CVE-2019-14540 Exploit http://www.leadroyal.cn/?p=939 Environment limitation: This demo uses the jndi ldap exploitation method, so a low version less than 8u191 of the jdk is required. 1. Use marshalsec to create an ldap service on local port 1389, pointing to the http service on local port 8000...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

FUDforum-XSS-RCE

FUDforum-XSS-RCE FUDForum 3.0.9 - XSS / Remote Code Execution CVE-2019-18873, CVE-2019-18839 Multiple Stored XSS vulnerabilities have been found in FUDforum 3.0.9 that can result in remote code execution. Stored XSS via username in forum: Info | Demo Stored XSS via useragent in admin panel: Info ...

CVE-2021-44228-PoC

CVE-2021-44228 Log4Shell Proof of Concept Apache Log4j2 =2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute...

CVE-2024-20696

libarchive-harness-win - CVE-2024-20696 Blog post: https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/ A simple test harness for CVE-2024-20696 1. Download a version of archiveint.dll that you want to test 2. Update the path here 3. Update the file pa...

nmap-spring4shell

Nmap-spring4shell Log4shell-nmap is an NSE script for detecting Spring4Shell RCE vulnerabilities CVE-2022-22965 in HTTP services. The script injects the correct payload into the application and then executes the following command on the specified endpoint. Vulnerability See here. Usage...

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apache HTTP Server Exploited On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the mo...

CVE-2023-30547

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...

CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true" Enables log rotati...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2022-34718-PoC

CVE-2022-34718 IPv6 Remote Code Execution exploit sample This repository contains an exploit of CVE-2022-34718, a Remote Code Execution RCE vulnerability in IPv6 on Windows systems. How to Since the vulnerability requires specially crafted IPv6 packets, it depends on the Scapy module and therefor...