1305367 matches found
poc_CVE-2024-32002_submodule
Este repositorio no tiene un README...
CVE-2024-32002-hulk
Este repositorio no tiene un README...
log4j-log4shell-affected
log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...
CVE-2023-48084
CVE-2023-48084 Corrige la sintaxis rota en el POC, principalmente importaciones incorrectas y referencias incorrectas a funciones de la API. Automatiza la obtención del APIToken, almacena el token como una variable y lo canaliza al POC corregido. https://github.com/Hamibubu/CVE-2023-48084 Si por...
external_tcpdump_CVE-2018-14469
tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...
vulnerability-remediation-cve-2013-3900
🛡️ Remediation of CVE-2013-3900: WinVerifyTrust Signature Validation 📝 Project Overview This project demonstrates a real-world Vulnerability Management Workflow. Using an Azure VM, I hunted down a high-severity signature validation flaw, confirmed it manually via PowerShell, and deployed a...
CVE-2018-11235
CVE-2018-11235 Creación automática de repositorio git malicioso para explotar CVE-2018-11235, una ejecución remota de código usando submódulos de Git. Publicación en el blog: https://devblogs.microsoft.com/devops/announcing-the-may-2018-git-security-vulnerability/...
CVE-2018-1999002
Este repositorio no tiene un README...
ODH-BricksBuilder-CVE-2024-25600-THM
ODH-BricksBuilder-CVE-2024-25600-THM Overview This repository hosts a Python-based vulnerability scanner developed by Oblivion Development & Hosting OD&H to detect CVE-2024-25600 in the Bricks Builder plugin for WordPress. This tool is designed primarily for use within Try Hack Me THM exercises,...
day05-grafana-sqlexpr-lab
Day 5 – Grafana SQL Expressions → DuckDB LFI CVE-2024-9264 TL;DR: On affected Grafana 11.x builds, a logged-in Viewer can use SQL Expressions. Grafana forwards the expression to DuckDB on the server. With readtext / readblob, you can read local files LFI. We plant a flag at /opt/flag.txt. Build →...
middleware-auth-bypass
middleware-auth-bypass CVE-2025-29927 un PoC del bypass de autenticación en middleware de Next.js...
TPLink-VN020-DoS
TPLink-VN020-DoS TPLink VN020-F3v Denegación de Servicio CVE-2024-12342 Uso: python3 CVE-2024-12342.py 192.168.1.1 python3 CVE-2024-12342.py 192.168.1.1 -p 8080...
omigod-lab
Readme An educational lab VM to learn about the 9.6 CVSS unauthenticated Remote Code Execution RCE vulnerability in Open Management Infrastructure software CVE-2021-38647. Disclosure original research: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure OMI source code:...
CVE-2025-48384
PoC for CVE-2025-48384 See CVE-2025-48384 To run: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning int...
jboss-deserialization
Deserialización Insegura de JBoss a RCE mediante CVE-2017-12149. Deserialización Insegura de JBoss - Laboratorio de Explotación de RCE. La idea aquí es configurar un laboratorio con una versión antigua de JBoss 7.0 para explotar la vulnerabilidad. Podemos usar Docker para facilitar todo el proces...
es_inject
CVE-2014-3120 Ejecución Remota de Código en Elastic Search Este proyecto demuestra la vulnerabilidad/malconfiguración CVE-2014-3120. Permite leer y añadir contenido a archivos en el sistema que aloja ES, siempre que el usuario que ejecuta ES tenga acceso a ellos. Notas Esto no requiere un servido...
shocknaww
shocknaww Simple script to check for CVE-2014-6271 Example Usage root@kitploit: ./shocknaww.py http://foo.bar/cgi-bin/foo Sample vulnerable environment From the parent directory, run the following. root@kitploit: python -m CGIHTTPServer Now use shocknaww against your localhost test server...
log4j-scanner-CVE-2021-44228
log4j-scanner CVE-2021-44228 Simple tool for scanning entire directories for attempts of CVE-2021-44228 there are always ways to bypass filters , same goes for the regex patterns...
php_hack
This tool exploits a vulnerability called CVE-2019-11043, an instance of insecure pointer arithmatic, to gain access to poorly configured PHP servers. It can be downloaded here you will need to run it from the command line Usage: phphack target IP target port...
