232320 matches found
CVE-2020-17057
I wrote this exp based on this blog（https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html），But I ended up with only palette objects with dangling data pointer. Because of type isolation, I can't get arbitrary R/W primitives by using palettes or bitmap objects，If you have a way to...
CVE-2020-1472
CVE-2020-1472 Packaged py files used in reproducing CVE-2020-1472 The examples path contains the directory where the exp files are located; the rest are import packages, just ignore them Corresponding blog post: https://www.svenbeast.com/post/fu-xian-cve-2020-1472-netlogon-te-quan-ti-sheng-lou-do...
CVE-2022-22947_exp
CVE-2022-22947-exp CVE-2022-22947 Exploit script Use python3 CVE-2022-22947.py Example: python3 CVE-2022-22947.py http://127.0.0.1:8080 "cat /etc/passwd"...
F5_RCE
Usage python3 f5rce.py -u Specify target URL -f Batch detect from file -c Execute command The effect is as follows: PS: The output is not aesthetically pleasing enough, I will modify it 😁 Issues This PoC currently only supports some commands. Executing history, ls, etc. fails for unknown reasons...
Andr01dExploits
Andr01d exploits...
CVE-2022-21661
CVE-2022-21661 CVE-2022-21661 exploit for Elementor custom skin...
CVE-2020-7384
CVE-2020-7384 This is a small exploit in bash which I had made while solving one of the boxes from Hack The Box. The exploit is modified from the original exploit here: https://github.com/justinsteven/advisories/blob/master/2020metasploitmsfvenomapktemplatecmdi.md Usage dos2unix CVE-2020-7384.sh...
CVE-2019-10149
CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Create exim user and group sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Install dependencies sudo apt-get update sudo apt-get install -y make build-essential...
CVE-2019-18634
CVE-2019-18634 N-Day Exploit Slides https://docs.google.com/presentation/d/11DpUy9LlHeuPRSgzaTARHPwlq01vyyqbnJURlG9Ss/edit?usp=sharing Requirements Ubuntu 20.04 sudo 1.8.25 see below for how to build it manually Python3 pwntools Enable pwfeedback sudo visudo Change this line Defaults envreset To...
CVE-2019-16692
CVE-2019-16692 Exploit code for CVE-2019-16692, a phpIPAM vulnerability...
GO-CVE-2011-4862
CVE-2011-4862 GO Exploit for CVE-2011-4862 Cross Compile with: GOOS=linux GOARCH=arm go build main.go...
CVE-2017-7269
CVE-2017-7269 iis6 exploit 2017...
Exploit-F5-CVE-2022-1388
Exploit-F5-CVE-2022-1388 PoC For F5 BIG-IP - bash script Exploit one Liner Vulnerable Versions : BIG-IP versions 16.1.0 to 16.1.2 Patch released BIG-IP versions 15.1.0 to 15.1.5 Patch released BIG-IP versions 14.1.0 to 14.1.4 Patch released BIG-IP versions 13.1.0 to 13.1.4 Patch released BIG-IP...
CVE-2024-24590-ClearML-RCE-CMD-POC
ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...
CVE-2024-12558-exploit
This repository does not have a README...
CVE-2022-40684
CVE-2022-40684 Individual or batch exploit for CVE-2022-40684 How to use Generate public key python3 exp.py -u ip:port -k idrsa2048.pub -l hosts.txt for batch processing with a file FOFA title="FortiGate"...
PrintNightmare
PrintNightmare Check if your post-Patch machine is still vulnerable Guidance on how to implement a non-malicious, 'defanged' version of the exploit. Research piece that dissects captured network traffic of the PrintNightmare exploit Analysis of a PCAP that contains malicious traffic from...
Chrome-V8-RCE-CVE-2021-38003
Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...
Vulmap
Vulmap is an open-source online local vulnerability scanner project. It consists of online local vulnerability scanning programs for Windows and Linux operating systems. These scripts can be used for defensive and offensive purposes. It is possible to make vulnerability assessments using these...