CVE-2009-2692

CVE-2009-2692 Разыменование нулевого указателя в Linux Это всего лишь скомпилированный бинарник кода, доступного по адресу https://www.exploit-db.com/exploits/9545/ Скомпилировано в образовательных целях Было скомпилировано под CentOS 4.8...

houndsploit

HoundSploit 저자: Nicolas Carolo [email protected] 저작권: © 2021, Nicolas Carolo. 날짜: 2021-11-26 버전: 2.8.0 목적 HoundSploit은 Exploit-DB를 위한 고급 검색 엔진으로, Python과 Flask 마이크로 웹 프레임워크를 사용하여 개발되었으며, 사용자에게 가장 정확한 검색 결과를 제공하는 것을 목표로 탄생했습니다. 기능 효과적인 버전 번호 필터링 고급 필터링 날짜 및 설명별 정렬 빠른 검색 사용자 정의 기능이 있는 검색 제안...

Log4j

1.创建一个示例漏洞应用程序。 2.启动一个netcat监听器。 3.运行漏洞利用程序。 5.使用jdk1.8.020以获得更好的结果。 Exploit-db - https://www.exploit-db.com/exploits/50592...

CVE-2022-46169

CVE-2022-46169 Исправленный эксплойт для CVE-2022-46169 первоначально из https://www.exploit-db.com/exploits/51166...

CVE-2022-24637

CVE-2022-24637 CVE-2022-24637에 대한 수정된 익스플로잇 원본 xplt: https://www.exploit-db.com/exploits/51026...

CVE-2020-14293

CVE-2020-14293 Эта уязвимость была обнаружена и раскрыта мной. В данном репозитории будут храниться консультация, уязвимое программное обеспечение и эксплойты. Этот репозиторий предназначен только для образовательных целей. Ссылки Консультация SYSS-2020-025 Подробное описание Запись в блоге SySS...

exploitation-course

КУРС АТАКУЮЩЕЙ БЕЗОПАСНОСТИ И РЕВЕРС-ИНЖИНИРИНГА OSRE Этот репозиторий предназначен для курса по атакующей безопасности и реверс-инжинирингу Offensive Software Exploitation , который я преподавал в Champlain College и в настоящее время делюсь им бесплатно онлайн проверьте канал YouTube для записе...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

CVE-2018-16763-exploit

CVE-2018-16763-익스플로잇 이것은 fuelCMS 1.4.1용 CVE-2018-16763의 업데이트된 버전입니다. 이 스크립트는 https://www.exploit-db.com/exploits/47138 의 스크립트를 기반으로 합니다. 이 스크립트는 Python 3과 함께 사용하기 위해 업데이트되었습니다...

Fortinet-PoC-Auth-Bypass

Fortinet-PoC-Auth-Bypass Fortinet 인증 우회 - CVE-2022-40684를 위한 Bash 개념 증명 PoC 사용법: root@kitploit: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Exploit-db에서 사용 가능: https://www.exploit-db.com/exploits/51092...

OpenEMR <5.0.2 - Local File Inclusion

OpenEMR before 5.0.2 is vulnerable to local file inclusion via the fileName parameter in custom/ajaxdownload.php. An attacker can download any file that is readable by the web server user from server storage. If the requested file is writable for the web server user and the directory...

LiveZilla Server 8.0.1.0 - Cross-Site Scripting

LiveZilla Server 8.0.1.0 is vulnerable to reflected cross-site scripting. id: CVE-2019-12962 info: name: LiveZilla Server 8.0.1.0 - Cross-Site Scripting author: Clment Cruchet severity: medium description: | LiveZilla Server 8.0.1.0 is vulnerable to reflected cross-site scripting. impact: |...

Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and...

Joomla! Component Horoscope 1.5.0 - Local File Inclusion

A directory traversal vulnerability in the Daily Horoscope comhoroscope component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1472 info: name: Joomla! Component Horoscope 1.5.0 - Local File Inclusion...

Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion

A directory traversal vulnerability in the Community Polls comcommunitypolls component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1081 info: name: Joomla! Component...

Chyrp 2.x - Local File Inclusion

A directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the action parameter to the default URI. id: CVE-2011-2744 info: name: Chyrp 2.x - Local File Inclusion author: daffainfo severity...

Joomla! Component redTWITTER 1.0 - Local File Inclusion

A drectory traversal vulnerability in the redTWITTER comredtwitter component 1.0.x including 1.0b11 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1983 info: name: Joomla! Component redTWITTER 1.0 - Local File Inclusio...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion

A PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites comjoomla-visites component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. id: CVE-2010-2918 info: name: Joomla! Component Visit...

Joomla! Component redSHOP 1.0 - Local File Inclusion

A directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1531 info: name: Joomla! Component redSHOP 1.0 - Local File Inclusion author: daffainfo...