Oracle WebLogic Server - Remote Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. id: CVE-2019-2725 info: name: Oracle WebLogic...

WordPress Chop Slider 3 - Blind SQL Injection

WordPress Chop Slider 3 plugin contains a blind SQL injection vulnerability via the id GET parameter supplied to getscript/index.php. The plugin can allow an attacker to execute arbitrary SQL queries in the context of the WP database user, thereby making it possible to obtain sensitive informatio...

Hardcoded Admin Credentials For Cisco Smart Licensing Utility API

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...

MantisBT <=2.30 - Arbitrary Password Reset/Admin Access

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Description This script automates the exploitation of CVE-2024-24919 Checkpoint Security Gateway Unauthorized Information Disclosure. 📌 Features ✅ Single & Bulk URL Testing ✅ Automated Exploitation ✅ Simple & Fast 🛠️ Usage Clone this repo and run the script: git clone...

CVE-2019-19609

CVE-2019-19609 Strapi Framework Vulnerable to Remote Code Execution well, I didnt found any exploit for CVE-2019-19609 so I wrote one. :/ Usage python3 exploit.py A video https://youtu.be/alhZJmuUd2s More Information https://hack-fast.herokuapp.com/cve/CVE-2019-19609...

CVE-2024-26230

CVE-2024-26230 All credit goes to k0shl @KeyZ3r0! Summary of Exploit A trick, the story of CVE-2024-26230 DISCLAIMER The exploit is not stable, only use it for study purposes...

CVE-2020-24186-exploit

CVE-2020-24186-exploit Attack script for CVE-2020-24186 Exploit usage: Commands: Windows/Linux: python3 CVE-2020-24186.py -u -p Example: python3 CVE-2020-24186.py -u http://127.0.0.1 -p /wordpress/2022/04/04/hello-world...

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Create exim user and group sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Install dependencies sudo apt-get update sudo apt-get install -y make build-essential...

CVE-2024-23334

CVE-2024-23334 :; Review of someone else's exploit Review an exploit published by someone else Abuse at your own risk Abuse at your own risk https://nvd.nist.gov/vuln/detail/CVE-2024-23334 Install python -m pip install --upgrade pip requirements.txt aiohttp==3.9.1 pip install -r requirements.txt...

ExploitWebmin

Script Webmin Project created by: Gabriel Jose. Python script to exploit webmin vulnerability cve-2006-3392 Example of how to use ./exploitWebmin.py -pt http -t host -p port -f file ./exploitWebmin.py -pt http -t 127.0.0.1 -p 10000 -f /etc/passwd...

CVE-2007-2447

CVE-2007-2447 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2007-2447 python3 smb3.0.20.py -lh localhost -lp local port -t target Error The error you're encountering indicates that the Python script is trying to import a module named smb, but it is not installed on your system. The smb module is part of the pysmb...

CVE-2020-5902-F5BigIP

CVE-2020-5902 F5 BIG-IP devices Summary: A Zeek detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks BIG-IP devices. References: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

ghost_exploit

This repository does not have a README...

used_sock

usedsock Kernel exploit for iOS 12-12.2 and 12.4. This isn't meant to be used in a jailbreak. You can find the writeup here...

CVE-2020-7384

CVE-2020-7384 This is a small exploit in bash which I had made while solving one of the boxes from Hack The Box. The exploit is modified from the original exploit here: https://github.com/justinsteven/advisories/blob/master/2020metasploitmsfvenomapktemplatecmdi.md Usage dos2unix CVE-2020-7384.sh...

CVE-2022-26134_conFLU

CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on Atlassian Confluence Exploit Usage python3 conFLU.py -h Usage: conFLU.py -h -u URL -f F -cmd CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --command CMD...

CVE-2017-5638-Mass-Exploit

This repository does not have a README...

duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Proud user of JetBrains Mono ⚡ This README uses JetBrains Mono exclusively. Comic Sans is forbidden. !IMPORTANT 🚨 Disclaimer This exploit is...