1303901 matches found
CVE-2016-5699-poc
CVE-2016-5699-poc PoC code of CVE-2016-5699 Vulnerability poc.py file is url sender to receiver.py receiver.py is Flask http receive headers testing Video : https://youtu.be/ugUt5iKpcV4 bunseokbot@UpRoot...
PoC-CVE-2021-41773
CVE-2021-41773 PoC Proof of concept to check if hosts are vulnerable to CVE-2021-41773. Description https://vulners.com/cve/CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49-2.4.50. An attacker could use a path traversal attack to map URLs to file...
CVE-2020-1472-visualizer
此存储库没有 README。...
CVE-2017-1000251_Exploit
Este repositorio no tiene un README...
Document-Linux-Privilege-Escalation
Linux 权限提升(通过 snapd) 项目目标: 利用 Canonical 的 snapd 守护进程(Ubuntu Linux 中的默认服务)REST API 中的漏洞“DirtySock”(CVE-2019-7304),获取 root 访问权限。 Ramil Mustafayev 的指南:https://kryptohaker.medium.com/linux-privilege-escalation-via-snapd-using-dirty-sock-exploit-and-demonstration-of-cve-2019-7304-892716cf99ca 设置: 此漏洞在...
CVE-2026-84226
OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on W...
CVE-2021-44228-PoC-log4j-bypass-words
🤝 展示您的支持 - 如果喜欢内容请给个 ⭐️ | 在 Twitter 上分享 | 关注我 🐱💻 ✂️ 🤬 LOG4J Java 漏洞利用 - WAF 和补丁绕过技巧 📝 描述 CVE-2021-44228 作用于: log4j:2.0 大写查找 大写查找将传入的参数转换为大写。假定该值将是嵌套查找的结果。 $upper: 3. "::-" 表示法 $$::-j$::-n$::-d$::-i:$::-l...
CVE-2015-1397
PoC para CVE-2015-1397 Inyección SQL de Magento. Lea más en : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...
cve-2023-42115
CVE-2023-42115: Scripts de Exploit y Generador de Payload Este repositorio contiene dos scripts de Python: 1. exploit.py : Un script para explotar CVE-2023-42115. 2. generatepayload.py : Un script para generar payloads de reverse shell. Requisitos previos Antes de ejecutar los scripts, asegúrate ...
CVE-2026-9082-PoC
python3 poc.py https://target.com...
CVE-2014-7911
Este repositorio no tiene un README...
CVE-2023-32315exp
This repository does not have a README...
CVE-2018-7935
CVE-2018-7935 POC grab vaild Session first curl http://192.168.8.1/html/index.html | grep SessionID Instructions: Edit exploit.py , insert grabbed SessionID Vulnerability Status : Acknowledgemnt Recieved & Patch is released...
YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune
此存储库没有 README。...
OpenSSL-1_0_1g_CVE-2015-3195
OpenSSL 1.0.1g 2014年4月7日 版权所有 c 1998-2011 OpenSSL 项目 版权所有 c 1995-1998 Eric A. Young, Tim J. Hudson 保留所有权利. 描述 OpenSSL 项目是一项协作努力,旨在开发一个健壮、商业级、功能齐全且开源的工具包,实现安全套接字层 SSL v2/v3 和传输层安全 TLS v1 协议,以及一个全强度通用密码库。该项目由一个全球志愿者社区管理,他们利用互联网沟通、规划和开发 OpenSSL 工具包及其相关文档。 OpenSSL 基于 Eric A. Young 和 Tim J. Hudson 开发的...
mongoaudit
mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: root@kitploit: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install...
PoC-for-Next.js-Middleware
PoC para el bypass del middleware de Next.js CVE-2025-29927 Esta es una prueba de concepto para una vulnerabilidad ficticia de omisión del middleware de Next.js CVE-2025-29927. Úselo solo con fines educativos y de investigación de seguridad autorizada. 🚀 Características...
CVE-2023-29489
此存储库没有 README。...
Grafana-Final-Scanner
Grafana Final Scanner A command-line vulnerability scanner for Grafana. It fingerprints the installed Grafana version, runs a set of version-aware CVE checks, audits common configuration weaknesses, stores results in a local database, and can serve them through a small web dashboard. Legal This...