CVE-2018-16763-exploit

CVE-2018-16763-exploit Esta es una versión actualizada del CVE-2018-16763 para fuelCMS 1.4.1 El script se basa en el de https://www.exploit-db.com/exploits/47138 El script está actualizado para su uso con Python 3...

exploitation-course

Curso de SEGURIDAD OFENSIVA E INGENIERÍA INVERSA OSRE Este repositorio es para el curso de Seguridad Ofensiva e Ingeniería Inversa Explotación Ofensiva de Software que solía enseñar en Champlain College y actualmente lo comparto gratuitamente en línea consulta el canal de YouTube para las...

CVE-2015-2153

CVE-2015-2153 An implementation of the CVE-2015-2153 exploit. The exploit-db post can be found at https://www.exploit-db.com/exploits/37663/...

CVE-2009-2692

CVE-2009-2692 Desreferencia de puntero nulo en Linux Este es solo el binario compilado del código disponible en https://www.exploit-db.com/exploits/9545/ Compilado con fines educativos Fue compilado en CentOS 4.8...

CVE-2023-22855

CVE-2023-22855 This vulnerability was discovered and disclosed by Nico Viakowski and myself. This repository will hold the advisory and the exploit. This repository is only for educational purposes. Links Vendor Website: https://www.kardex.com/en/mlog-control-center Exploit on Exploit-DB:...

CVE-2022-46169

CVE-2022-46169 Exploit corregido para CVE-2022-46169 originalmente de https://www.exploit-db.com/exploits/51166...

CVE-2017-9841

MASS CVE-2017-9841 Usage root@kitploit: apt install python3 python3-pip -y pip3 install -r require.txt python3 main.py Preview Reference https://www.exploit-db.com/exploits/50702...

CVE-2019-10945

CVE-2019-10945 This is a Python 3 port of the original exploit from Haboob Team: https://www.exploit-db.com/exploits/46710...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...

Fortinet-PoC-Auth-Bypass

Fortinet-PoC-Auth-Bypass Prueba de concepto PoC en Bash para el bypass de autenticación de Fortinet - CVE-2022-40684 Uso: root@kitploit: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Disponible en Exploit-db: https://www.exploit-db.com/exploits/51092...

houndsploit

HoundSploit Autor: Nicolas Carolo [email protected] Copyright: © 2021, Nicolas Carolo. Fecha: 2021-11-26 Versión: 2.8.0 PROPÓSITO HoundSploit es un motor de búsqueda avanzado para Exploit-DB desarrollado en Python usando Flask como micro framework web, creado con el objetivo de mostrar al...

CVE-2022-24637

CVE-2022-24637 Exploit corregido para CVE-2022-24637 xplt original: https://www.exploit-db.com/exploits/51026...

Log4j

Crea una aplicación vulnerable de muestra. 2. Inicia un listener de netcat. 3. Ejecuta el exploit. 4. Usa jdk1.8.020 para mejores resultados. Exploit-db - https://www.exploit-db.com/exploits/50592...

CVE-2018-10732

CVE-2018-10732 Publicación de Exploit-DB: ¡Sin divulgación! Parche y créditos del proveedor Dataiku: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity Autor Alex Hernandez alias @alt3kx...

CVE-2018-15745

Argus Surveillance DVR 4.0.0.0 - Recorrido de Directorios Aviso legal Este código se proporciona únicamente con fines educativos y de investigación. El autor no es responsable del mal uso o los daños causados por este código. Usted es responsable de asegurarse de tener la autorización adecuada...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

Kentico - Installer Privilege Escalation

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard. id: CVE-2017-17736 info: name: Kentico - Installer...

WordPress Church Admin <0.810 - Cross-Site Scripting

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/churchadmin-registration-form/. id: CVE-2015-4127 info: name: WordPress Church Admin 0.810 - Cross-Site Scripting author: daffainfo severity...

Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...

Aruba Airwave <8.2.3.1 - Cross-Site Scripting

Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting. id: CVE-2016-8527 info: name: Aruba Airwave 8.2.3.1 - Cross-Site Scripting author: pikpikcu severity: medium description: Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting...