CVE-2017-9841

MASS CVE-2017-9841 Utilisation root@kitploit: apt install python3 python3-pip -y pip3 install -r require.txt python3 main.py Aperçu Référence https://www.exploit-db.com/exploits/50702...

CVE-2019-10945

CVE-2019-10945 Это порт на Python 3 оригинального эксплойта от команды Haboob: https://www.exploit-db.com/exploits/46710...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...

Fortinet-PoC-Auth-Bypass

Fortinet-PoC-Auth-Bypass Bash-доказательство концепции PoC для обхода аутентификации Fortinet - CVE-2022-40684 Использование: root@kitploit: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Доступно в Exploit-db: https://www.exploit-db.com/exploits/51092...

houndsploit

HoundSploit Автор: Nicolas Carolo [email protected] Авторское право: © 2021, Nicolas Carolo. Дата: 2021-11-26 Версия: 2.8.0 НАЗНАЧЕНИЕ HoundSploit — это продвинутая поисковая система для Exploit-DB, разработанная на Python с использованием Flask в качестве микро-веб-фреймворка. Она создана с...

CVE-2022-24637

CVE-2022-24637 Исправленный эксплойт для CVE-2022-24637 оригинальный xplt: https://www.exploit-db.com/exploits/51026...

Log4j

Créez un exemple d'application vulnérable. 2. Démarrez un écouteur netcat. 3. Exécutez l'exploit. 4. Utilisez jdk1.8.020 pour de meilleurs résultats. Exploit-db - https://www.exploit-db.com/exploits/50592...

CVE-2018-10732

CVE-2018-10732 Publication Exploit-DB à : Aucune divulgation! Correctif et crédits du fournisseur Dataiku: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity Auteur Alex Hernandez alias @alt3kx...

CVE-2018-15745

Argus Surveillance DVR 4.0.0.0 - Traversée de répertoire Avertissement Ce code est fourni à des fins éducatives et de recherche uniquement. L'auteur n'est pas responsable de toute utilisation abusive ou des dommages causés par ce code. Vous êtes responsable de vous assurer que vous disposez des...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

CVE-2018-16763-exploit

CVE-2018-16763-익스플로잇 이것은 fuelCMS 1.4.1용 CVE-2018-16763의 업데이트된 버전입니다. 이 스크립트는 https://www.exploit-db.com/exploits/47138 의 스크립트를 기반으로 합니다. 이 스크립트는 Python 3과 함께 사용하기 위해 업데이트되었습니다...

Kentico - Installer Privilege Escalation

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard. id: CVE-2017-17736 info: name: Kentico - Installer...

WordPress Church Admin <0.810 - Cross-Site Scripting

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/churchadmin-registration-form/. id: CVE-2015-4127 info: name: WordPress Church Admin 0.810 - Cross-Site Scripting author: daffainfo severity...

Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...

Aruba Airwave <8.2.3.1 - Cross-Site Scripting

Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting. id: CVE-2016-8527 info: name: Aruba Airwave 8.2.3.1 - Cross-Site Scripting author: pikpikcu severity: medium description: Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting...

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal

A directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter. id: CVE-2013-7240 info: name: WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal author...

Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion

Joomla! Image Browser 0.1.5 rc2 is susceptible to local file inclusion via comimagebrowser which could allow remote attackers to include and execute arbitrary local files via a .. dot dot in the folder parameter to index.php. id: CVE-2008-4668 info: name: Joomla! Image Browser 0.1.5 rc2 - Local...

Ericsson Drutt MSDP - Local File Inclusion

Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI in the Instance Monitor. id: CVE-2015-2166 info: name: Ericsson Drutt MSDP - Local File Inclusion author: daffainfo severity: mediu...

PrestaShop 1.7.7.0 - SQL Injection

PrestaShop 1.7.7.0 contains a SQL injection vulnerability via the store system. It allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade idproducts parameter. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...