578003 matches found
metasploitable2-exploitation-metasploit
Exploiting Metasploitable2 with Metasploit: VSFTPD, Samba, and More A hands-on walkthrough of exploitation using the Metasploit Framework — from PostgreSQL database setup and dbnmap scanning, through three root shells via vsftpd, Samba, and UnrealIRCd, to credential exfiltration with Netcat...
CVE-2024-3400
CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type: application/x-www-form-urlencoded...
CLEANSTART-2023-JO14904 SQL injection in Log4cxx when using the ODBC appender to send log messages to a database
Security vulnerability affects the log4cxx package. SQL injection in Log4cxx when using the ODBC appender to send log messages to a database...
CVE-2026-12960
CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...
CVE-2022-30511
CVE-2022-30511 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30511 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...
[SECURITY] [DLA 4873-1] dovecot security update
Debian LTS Advisory DLA-4873-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 31, 2026 https://wiki.debian.org/LTS Package : dovecot Version : 1:2.3.19.1+dfsg1-2.1+deb12u7 CVE ID : CVE-2026-27852 CVE-2026-33263 CVE-2026-33604 CVE-2026-33605 CVE-2026-33606...
CLEANSTART-2024-ZN39251 Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7
Security vulnerability affects the otrs package. Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG OTRS Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7...
CVE-2023-2744
Exploit Title: WP Plugins WP ERP = 1.12.2 - SQL Injection Date: 15-10-2023 Exploit Author: Arvandy Software Link: https://wordpress.org/plugins/erp/ Vendor Homepage: https://wperp.com/ Version: 1.12.2 Tested on: Windows, Linux CVE: CVE-2023-2744 Product Description WP ERP is the first full-fledge...
CVE-2024-13485
CVE-2024-13485 LTL Freight Quotes – ABF Freight Edition = 3.3.7 - Unauthenticated SQL Injection Description The LTL Freight Quotes – ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.3.7...
watchTowr-vs-FreePBX-CVE-2025-57819
CVE-2025-57819 FreePBX Pre-Auth RCE FreePBX Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to upload the php script or adds a new user if the upload fails. $ python3 watchTowr-vs-FreePBX-CVE-2025-57819.py -H http://freepbx.lab.local /...
CLEANSTART-2023-LJ76680 CSV Injection vulnerability in Nikto 2
Security vulnerability affects the nikto package. CSV Injection vulnerability in Nikto 2...
CLEANSTART-2025-DM21369 OS Command Injection vulnerability exists in Node
CVE-2022-43548 affects multiple packages. A OS Command Injection vulnerability exists in Node. See references for individual vulnerability details...
CVE-2020-28032_PoC
CVE-2020-28032PoC PoC for CVE-2020-28032 It's just a POP chain in WordPress RequestsUtilityFilteredIterator Object callback:protected = system storage:ArrayIterator:private = Array 0 = id uid=1000nth347 gid=1000nth347...
CVE-2022-44877
Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877 + Centos Web Panel 7 Unauthenticated Remote Code Execution + Centos Web Panel 7 - log ➜ CVE-2022-44877 cat log examplelog ➜ CVE-2022-44877 echo "examplelog $whoami" log ➜ CVE-2022-44877 cat log examplelog examplelog root ➜...
cve-2024-3400-panos_rce_reproduction
CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICAL | CWE-78: OS Command Injection | Mass Exploited In The Wild Overview CVE-2024-3400 is a pre-authentication command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interface...
CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX
FreePBX CVE-2025 Vulnerability Scanner ⚠️ DISCLAIMER FOR EDUCATIONAL AND AUTHORIZED TESTING ONLY This tool is provided "AS IS" for educational and research purposes only Authors are NOT responsible for any misuse or illegal activities Unauthorized access to computer systems is ILLEGAL Only use on...
CVE-2024-4577
CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...
CVE-2023-1545
CVE-2023-1545 Simple SQL Injection Python script for Teampass prior to versions 3.0.0.23, leveraging CVE-2023-1545. More information on this blog. Usage Just use set the URL where Teampass is running as unique argument: python3 CVE-2023-1545.py http://example.com:8080 Discliamer Use it for ethica...
CVE-2021-26084
CVE-2021-26084 Description - POC of CVE-2021-26084, which is Atlassian Confluence Server OGNLObject-Graph Navigation Language Pre-Auth RCE Injection Vulneralibity. - create by antx at 2022-01-13. Detail - In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability...
CVE-2016-5640
CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit Module Module for exploiting a Remote Command Injection vulnerability in the wireless diagnostics page for Crestron AirMedia AM-100 devices with a firmware version 1.4.0.13. Commands execute as the account running the service i.e...