Follina_Exploiter_CLI

Follina Exploiter CLI Tool MSDT Vulnerability CVE-2022-30190 A Command Line based python tool for exploit Zero-Day vulnerability in MSDT Microsoft Support Diagnostic Tool also know as 'Follina' CVE-2022-30190. Info : New Microsoft Office zero-day used in attacks to execute PowerShell Made In...

SafeGuard

./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Go’s standard library e.g. AES-GCM for...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the...

CVE-2024-57487-and-CVE-2024-57488

Online Car Rental System Vulnerabilities This repository contains details about the vulnerabilities identified in Code-Projects Online Car Rental System project Version 1.0. The vulnerabilities have been assigned CVEs and include comprehensive writeups to assist in understanding and mitigating th...

POC-CVE-2022-28117

CVE 2022 28117 PoC Python with slight modifications Usage : python3 .\poccve2022-28117.py -x file:///etc/passwd -u username -p password http://192.168.148.140/navigate...

CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File Write Path Traversal -orange 📋 Description CVE-2026-20262 is a Path Traversal CWE-22 vulnerability in the web interface of Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage. It allows an authenticated attacker with write permission...

ghost

ghost ghost is a light RAT that gives the server/attacker full remote access to the user's command-line interpreter cmd.exe. They are allowed to execute commands silently without the client/zombie noticing. The server/attacker is also given the ability to download and execute files on the...

CVE-2025-13796-PoC

CVE-2025-13796-PoC deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery PoC : curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 and CVE-2025-71260 BMC FootPrints Pre-Authenticated Remote Code Execution Chain BMC FootPrints Pre-Authenticated Remote Code Execution Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if BMC FootPrints instance is vulnerable to...

CVE-2020-9380

PoC IPTV Smarters Exploit Usage python gld.py -u http://www.pirate-ilegal-tv.com/ -i Vulnerability file includes/ajax-control.php: ?php / @ PHP 5.6 @ Decoder version : 1.0.0.1 @ Release on : 24.03.2018 @ Website : http://EasyToYou.eu / sessionstart; if fileexists"functions.php" includeonce...

exploit-CVE-2018-15139

OpenEMR CVE-2018-15139 exploit OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2026-78163

CVE-2026-78163 — camel-docling: unvalidated body input source SSRF + local file disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where DoclingProducer decided what a String message body meant by inspecting its prefix : a body starting with http:// or https:// was...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...

hitron-cfg-decrypter

Hitron CFG Decrypter Downloading git clone https://github.com/Manouchehri/hitron-cfg-decrypter cd hitron-cfg-decrypter/ Decrypting python decrypt.py -i sample.cfg.enc Encrypting python decrypt.py -i sample.cfg.dec -m encrypt Getting the CFG Thanks to Michael Henke @henkman for his previous work o...

CVE-2015-9331

CVE-2015-9331 POC Vulnerability Description CVE-2015-9331 is an arbitrary file upload vulnerability in the WordPress plugin WP All Import. This vulnerability allows an unauthenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution. Affected Versions...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

CVE-2025-30567

Introduction Unauthorized Arbitrary File Download in WordPress WP01！ Environment setup Step 1: Download the WP01 Plugin，But... Haha, don't worry, here is the source code of the plugin. Step 2: Package the provided wp01 folder and upload it to the WordPress plugins section.like this-- Analysis It'...

CVE-2025-6002

Exploit for CVE-2025-6002 This script exploits the authenticated arbitrary file upload vulnerability in VirtueMart 4.4.10 CVE-2025-6002, which is described in this blog post: https://blog.blacklanternsecurity.com/p/doomla-zero-days This script logs in to VirtueMart with the given credentials,...

GrafanaDirInclusion

Grafana CVE-2021-43798 Exploit Script Script to demonstrate the Grafana directory traversal exploit CVE-2021-43798 that affects Grafana versions 8.0.0-beta1 through 8.3.0. Primarily used for a demonstration in a CTF. Written in python with standard library modules only. Only use this for legitima...