CVE-2023-22515-NSE

CVE-2023-22515-NSE Vulnerability checking tool via Nmap Scripting Engine 1. Принципы механизмы работы уязвимости CVE-2023-22515 для Atlassian Confluence Server. 1. Злоумышленник изменяет конфигурацию сервера, отправляя запрос на уязвимый endpoint:...

CVE-2023-1698

wagoexploit.py - PoC Exploit for CVE-2023-1698 🚀 About wagoexploit.py is a proof-of-concept PoC exploit for CVE-2023-1698 , a critical vulnerability affecting WAGO PLCs. This exploit grants the attacker shell access to the device, potentially exposing sensitive operations. ⚠️ Disclaimer: This...

cve-2025-55182

🛡️ React2Shell CTF 🚀 React2Shell-CTF 에 오신 것을 환영합니다. React2ShellCVE-2025-55182 악용을 연습하도록 설계된 Docker 기반 환경입니다. React2Shell 은 React 기반 애플리케이션에 영향을 주는 치명적인 취약점입니다. 이 저장소는 이 결함을 이해하고 완화하는 데 도움이 되도록 로컬에 안전하게 배포할 수 있는 CTFCapture The Flag 챌린지를 제공합니다. Reverse Shell을 획득할 수 있나요? 🐚 ℹ️ 취약점 정보 CVE-2025-55182 에...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

CVE-2020-5902-F5BigIP

CVE-2020-5902 F5 BIG-IP devices Summary: A Zeek detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks BIG-IP devices. References: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

CVE-2025-49113

CVE-2025-49113 Detection ПРИМЕЧАНИЕ Этот шаблон теперь реализован в инструменте Artemis от CERT Polska. Я глубоко польщён признанием CERT Polska за этот скрипт обнаружения уязвимостей. Это настоящая привилегия — играть роль в укреплении глобальной кибербезопасности благодаря вкладу в открытый...

CVE-2026-76757

CVE-2026-76757 affects the Drupal Gammu SMS Daemon contrib module across all versions (. ). The Drupal security team has marked the project as unsupported , and the known security flaw remains unaddressed by the maintainer. No specific root cause or affected function is identified in the provided...

CVE-2024-3094-One-Liner

CVE-2024-3094 One Liner Vulnerability Checker This repository provides simple yet powerful one-liner scripts designed to help you quickly determine if your server is vulnerable to CVE-2024-3094, a critical security vulnerability found in certain versions of the xz utility. Additionally, we offer ...

CVE-2023-22518

CVE-2023-22518 Проверка критических уязвимостей CVE-2023-22518 и CVE-2023-22515 в Confluence. Описание Этот скрипт предназначен для проверки и эксплуатации уязвимостей в экземплярах Atlassian Confluence. Он проверяет наличие уязвимости CVE-2023-22518 и эксплуатирует уязвимость CVE-2023-22515 для...

GoF5-CVE-2020-5902

GoF5-CVE-2020-5902 Утилита с открытым исходным кодом для проверки критической уязвимости в F5 BIG-IP Traffic Management User Interface TMUI CVE-2020-5902, написанная на Golang. Демонстрация Windows...

CVE-2023-38408

CVE-2023-38408 PoC for the recent critical vuln affecting OpenSSH versions 9.3p2 Designed to work seamlessly with TryHackMe's free access lab environment covering this vuln. https://tryhackme.com/room/cve202338408 NOTE: This will not work outside the THM Lab environment...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

blmvuln

Corriger les principales vulnérabilités de sécurité sur les sites PrestaShop :rocket: Détecteur et correcteur de la CVE-2022-31101 ! Une faille nouvellement découverte pourrait permettre à des attaquants distants de prendre le contrôle de votre boutique...

TotoLink Router setMacFilterRules - Command Injection

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. id: CVE-2024-24328 info: name: TotoLink Router setMacFilterRules - Command Injection author: pussycat0x severity: critical description: |...

DataEase v2.10.2 - JWT Signature Verification Bypass

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions, the lack of signature verification of JWT tokens allows attackers to forge JWTs, which then allow access to any interface. The...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

YMC Filter - SQL Injection

YMC Filter = 3.11.5 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-54836 info: name: YMC Filter - SQL Injection author: theamanrawat severity: critical...

openSIS Classic v9.1 - SQL Injection

SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $usernamestnid parameter, which can be manipulated by an attacker to inject arbitrary SQL commands. id: CVE-2024-51211...

Vipshop Saturn Console <= 3.5.1 - SQL Injection via ClusterKey Component

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component. id: CVE-2025-29085 info: name: Vipshop Saturn Console = 3.5.1 - SQL Injection via ClusterKey Component author:...

Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the...