CVE-2024-24919

CVE-2024-24919 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID : CVE-2024-24919 Severity : Critical Table of Contents Vulnerability-detail...

ClearML-CVE-2024-24590-RCE

Clearml-CVE-2024-24590 CVE-2024-24590 is a vulnerability that can be exploited when there is improper deserialization on the server side, in this case, Clearml. When an attacker creates a malicious Pickle file, they can execute arbitrary code on the victim who deserializes the Pickle file, which...

hashdeep

This is md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure. It can also take a list of known hashes and display the filenames of input files whose hashes either do or do not mat...

Veto

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

CVE-2024-3400

CVE-2024-3400 Description A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code...

CVE-2017-12615

CVE-2017-12615 Usage: CVE-2017-12615.py http://targetip:port When ops retardedly enable put method in web.xml on Apache Tomcat 7.0.0 - 7.0.79 this EXP should be working...

ExportHider

ExportHider ExportHider generates a C++ DLL template which contains a code stub that allows you to hide Exported Functions from the Export Directory of the DLL on the filesystem. After putting the function definitions and compiling the file, you won't see the hidden export functions through PE Fi...

cve-2017-0199

cve-2017-0199 Sample file used in the wild https://twitter.com/SyFi2k...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

PoC-Fix-jenkins-rce_CVE-2024-23897

PoC-jenkins-rceCVE-2024-23897. On this git you can find all information on the CVE-2024-23897. Introduction The issue, assigned the CVE identifier CVE-2024-23897, has been described as an arbitrary file read vulnerability through the built-in command line interface. This command parser has a...

CVE-2019-11223

CVE-2019-11223 Arbitrary File Upload in Wordpress Plugin SupportCandy Version 2.0 Below https://cert.kalasag.com.ph/news/research/vulnerable-wordpress-plugin-lets-you-take-over-websites/ https://wordpress.org/plugins/supportcandy/developers...

propane

propane Exploits the arbitrary file write bug in ProFTPD's modcopy module CVE-2015-3306 and attempts code execution...

GenCrushSSTIExploit

EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

CVE-2016-10956-mail-masta

Mail Masta - Local File Read CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file read in countofsend.php and csvexport.php. Usage $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETURL -f FILE | -F...

EggShell

EggShell About EggShell is a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location...

CVE-2022-45771

CVE-2022-45771 The PwnDoc is vulnerable to both path traversal and local file inclusion LFI, which allows unprivileged users to disclose JWT secrets and achive code execution. Requirements: An attacker has valid account with user role The application has a report template with either...

CVE-2021-43798-Grafana-POC

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability POC Usage: python3 exp.py IP:PORT...

cve-tarmageddon

CVE-2025-62518: TARmageddon This repository demonstrates a critical bug in tokio-tar and related async Rust tar libraries where PAX extended header size overrides are not applied before calculating the next header position. Bug Summary Root Cause: When processing tar files with PAX extended heade...

CVE-2023-40028

CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email for the target Ghost CMS. --password : The password for the target Ghost CMS. --url : The URL of the target Ghost CMS e.g., http://website.com. 1. Login: The script authenticates with the Ghost CMS admin API and retrieves a session...