489227 matches found
CVE-2023-35843
CVE-2023-35843 NocoDB Arbitrary File Read CVE-2023-35843...
exe2powershell
exe2powershell exe2powershell - exe2bat reborn for modern Windows exe2bat reborn in exe2powershell for modern Windows exe2powershell is used to convert any binary file .exe to a BAT file. The resulting BAT file contains only "echo" command and finally a powershell command to re-create the origina...
ZIPFileRaider
ZIP File Raider - Burp Extension for ZIP File Payload Testing ZIP File Raider is a Burp Suite extension for attacking web application with ZIP file upload functionality. You can easily inject Burp Scanner/Repeater payloads in ZIP content of the HTTP requests which is not feasible by default. This...
cve-2025-66723
CVE-2025-66723: inMusic Brands Engine DJ =3.0.0 through =3.0.0, 4.3.4, on all platforms macOS, Windows. Specifically tested versions found affected/vulnerable, macOS and Windows: 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.2.0, 3.3.0, 3.4.0, 4.0.0, 4.0.1, 4.1.0, 4.2.0, 4.2.1, 4.3.0 Specifically tested versions...
CVE-2024-42845-Exploit
CVE-2024-42845: Remote Code Execution RCE in Invesalius 3.1 Exploit Details Exploit Title : Invesalius 3.1 - Remote Code Execution RCE Discovered By : Alessio Romano sfoffo, Riccardo Degli Esposti partywave Exploit Author : Alessio Romano sfoffo, Riccardo Degli Esposti partywave Date : 2024-08-23...
ppsx-file-generator
Introduction By Temesgen Yibeltal [email protected] Based on code by https://github.com/bhdresh/CVE-2017-8570 now removed ppsx-file-generator is a python tool that generates a power point slide show file that executes code from a remote source based on an existing file. What does it do? The...
CVE-2025-57460
CVE-2025-57460 Des: File upload vulnerability in machsol machpanel 8.0.32 allows attacker gain a webshell. POC: Navigate to https://controlpaneldomain/Client/SubmitTicket.aspx and Upload ASPx webshell then submit the ticket, finally open the file to execute shell and execute commands such as...
CVE-2021-43798
Grafana CVE-2021-43798 Exploit Overview This repository demonstrates the exploitation of CVE-2021-43798, a directory traversal vulnerability in Grafana. This vulnerability allows attackers to read arbitrary files on the server. CVE Details CVE : CVE-2021-43798 Description : Directory traversal...
Apache-Solr-Arbitrary-File-Read
Apache Solr Arbitrary File Read Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and client libraries for many programming languages such...
CVE-2024-12471
CVE-2024-12471 Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator input type="hidden" name="insertprompt...
NetSec-CVE-2023-4357
Network Security Project — CVE-2023-4357 Overview This project is a final project for a Network Security course. The project focuses on CVE-2023-4357, a vulnerability affecting Google Chrome versions prior to 116.0.5845.96. The vulnerability is related to the handling of XML/XSLT and can allow a...
docker-log4shell
docker-log4shell Simple Go app / Docker image for playing with the CVE-2021-44228 vulnerability. Hosts a simple file server and an ldap server that provides any classes hosted in the file server: ldap://ip:1389/Hello - http://ip:8080/Hello.class docker build -t log4shell . docker run -it -v...
CVE-2024-23897
CVE-2024-23897 CVE-2024-23897 jenkins-cli We have seen Jenkins File Leak / RCE CVE-2024-23897 exploited in the wild and managed to reproduce it. If your Jenkins allows anonymous users or user registration, immediately update it to the latest version. java -jar jenkins-cli.jar -s...
MSAPer
MSAPer | CVE-2023-3076 - MStore API Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use Make sure you already install Parallel! Then do: git clone...
VulnLab
VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...
cve-2020-3452
cve-2020-3452 unauth file read in cisco asa & firepower. install git clone https://github.com/Loneyers/cve-2020-3452 && cd cve-2020-3452 && go build use ./cve-2020-3452 url.txt 40...
CVE-2024-28995
CVE-2024-28995 PoC SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. Queries Shodan: product:"Rhinosoft Serv-U httpd" "Serv-U FTP Server" Fofa: app="SolarWinds-Serv-U-FTP" References...
CVE-2020-25042-PoC
CVE-2020-25042-PoC Proof-of-concept for CVE-2020-25042, an authenticated arbitrary file upload issue in Mara CMS 7.5 that can lead to remote code execution. The script logs in with a valid Mara CMS admin/manager account, uploads a PHP payload through codebase/handler.php, and executes commands...
CVE-2021-41773
CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...