CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 batch scanning and exploitation script. PHPUnit is a PHP-based testing framework. There is a security vulnerability in the Util/PHP/eval-stdin.php file in PHPUnit versions prior to 4.8.28 and 5.x versions prior to 5.6.3. Remote attackers can exploit this vulnerability ...

Likeshop < 2.5.7.20210311 - Arbitrary File Upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file with an...

Apache Solr - Deserialization of Untrusted Data

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side. id:...

CVE-2023-31719

CVE-2023-31719 Its possible do inject SQL code into the JSON parameter "username" from the endpoint /api/signin via HTTP POST request "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" Name Affected product: FUXA Version affected: = 1.1....

CVE-2024-24919

EN CVE-2024-24919 취약점을 확인하기 위한 개념 증명PoC 스크립트입니다. 이 스크립트는 지정된 URL에 HTTP POST 요청을 보내고, 응답을 분석하여 무단 접근이나 민감한 데이터 유출과 같은 보안 문제 가능성을 확인하도록 설계되었습니다. 이 스크립트는 간단하면서도 강력한 방법으로 엔드포인트 목록의 잠재적 취약점을 테스트할 수 있게 해줍니다. ✨ 기능 여러 대상에 HTTP POST 요청 전송 서버 응답에서 잠재적 취약점 표시 분석 다양한 공격 시나리오에 맞춰 페이로드payload 커스터마이징 옵션 결과를 파일로...

w48crash

WebMod Stack Buffer Overflow CVE-2007-1260 by cybermind Kevin Masterson [email protected] WebMod site archived: https://web.archive.org/web/20080517044559/http://djeyl.net/w.php Vulnerable versions: 0.48, both Win32 and Linux. Previous versions may be vulnerable. This should work with any...

Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation

Incident Analysis: Check Point Security Gateway CVE-2024-24919 Exploitation Attempt 📌 Executive Summary On June 6, 2024, at 03:12 PM, security monitoring systems triggered an alert for a high-severity exploit attempt targeting a Check Point Security Gateway CP-Spark-Gateway-01, IP: 172.16.20.146...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Descrizione: Questo repository contiene un Proof of Concept PoC per lo sfruttamento di Nortek Linear eMerge E3 CVE-2024-9441, vulnerabile a Remote Code Execution RCE in stato di pre-autenticazione. La vulnerabilità viene attivata tramite un...

CVE-2017-15220-vxsearch-rce

CVE-2017-15220 – Overflow del buffer remoto in VX Search Enterprise Vulnerabilità di overflow del buffer remoto in VX Search Enterprise 10.1.12. Dettagli della vulnerabilità CVE: CVE-2017-15220 Prodotto: VX Search Enterprise Versione: 10.1.12 Impatto: Esecuzione di codice remota Descrizione VX...

S2-046_S2-045_POC

S2-046POC Utilizzo: root@kitploit: ./s2046.sh url ./s2045.sh url Esempio: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action RISULTATO: root@kitploit: ================HTTP GET Method================ uid=0root gid=0root groups=0root...

cisco-CVE-2023-20198-tester

Cisco Tester: Skript zur Schwachstellenerkennung Table of Contents Übersicht Funktionen Voraussetzungen Installation Verwendung Ausgabe Mitwirken Übersicht Das Skript ciscotester.py wurde entwickelt, um mehrere IP-Adressen auf eine spezifische Cisco-Schwachstelle CVE-2023-20198 zu überprüfen. Es...

firewall

🛡️ Spring4Shell Firewall Defense – Simulazione di un Incidente di Cybersecurity Questo progetto fa parte di una simulazione lavorativa di Cybersecurity che ho completato tramite Forage nell'agosto 2025. Simula un incidente reale che coinvolge la vulnerabilità Spring4Shell CVE-2022-22965 e dimostra...

CVE-2019-16724

Descrizione della vulnerabilità File Sharing Wizard 1.5.0 consente a un attaccante remoto di ottenere l'esecuzione di codice arbitrario sfruttando un overflow del buffer basato su Structured Exception Handler SEH in un parametro HTTP POST. Questo exploit è stato testato su Windows 7 Home...

log-add-http-post-bodies

Aggiungi estratto del corpo POST al log HTTP Questo script consente agli analisti di dare un'occhiata a ciò che viene inviato nei corpi delle richieste POST HTTP. Fornisce questa funzionalità semplicemente estendendo il log HTTP. Installazione :: zkg refresh zkg install...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Exploração da Vulnerabilidade de Execução Remota de Código CVE-2024-7954 Projeto de Teste de Vulnerabilidade de Software Enviado por: Shivansh Kuntal Visão Geral Este projeto demonstra a exploração da CVE-2024-7954 , uma vulnerabilidade crítica de Execução Remota de Código RCE que afeta o SPIP CM...

Citrix-ADC-RCE-CVE-2020-8193

Citrix ADC RCE 0x01 CreateSession request POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1 Host: 192.168.3.18:9080 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/76.0.3809.132 Safari/537.36...

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

CVE-2022-22965 — Spring4Shell Security Operations Analyse Eine praktische Simulation eines Security Operations Centre SOC, bei der ich die Rolle eines Information Security Analyst übernommen habe und auf einen aktiven Spring4Shell-Exploit-Versuch reagiert habe. Dieses Repository dokumentiert den...

CVE-2024-38856

CVE-2024-38856 Scanner RCE per Apache Ofbiz Descrizione Questo script è progettato per scansionare la vulnerabilità CVE-2024-38856 nelle applicazioni Apache Ofbiz, che può consentire l'esecuzione remota di codice. Invia richieste HTTP POST a percorsi specifici all'interno dell'applicazione Ofbiz...

CVE-2026-24330

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...