CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

pmanager

Pmanager Demostración Descripción Almacena y recupera tus contraseñas desde una base de datos local y segura. Verifica si tus contraseñas han sido filtradas anteriormente para evitar ataques de reutilización dirigida de contraseñas. ¿Por qué desarrollar otro gestor de contraseñas? Este proyecto...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Remote Code Execution without authentication nexus 关于命令回显： functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character'; integer=1.class; x='...

onionjuggler

OnionJuggler Gestor de servicios onion con muchas funciones para sistemas operativos tipo UNIX, escrito en shellscript compatible con POSIX OnionJuggler es una colección portátil de scripts y documentación de requisitos mínimos para ayudar al operador del servicio a hacer malabares gestionar sus...

CVE-2024-29849

CVE-2024-29849 Veeam Backup Enterprise Manager Authentication Bypass CVE-2024-29849 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Supported versions? According to Veeam official advisory...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Remote Code Execution Authenticated 🚨 About the Exploit This is a Bash-based authenticated Remote Code Execution RCE exploit for Tiny File Manager versions = 2.4.6, vulnerable under CVE-2021-40964. The script leverages: Weak upload validation and webroot disclosure, An...

CVE-2025-6970

CVE-2025-6970 Events Manager = 7.0.3 - Inyección SQL no autenticada a través del parámetro orderby Descripción El plugin Events Manager – Calendar, Bookings, Tickets, and more! para WordPress es vulnerable a una inyección SQL basada en tiempo a través del parámetro 'orderby' en todas las versione...

quasibot

quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...

CVE-2023-25202

CVE-2023-25202: Mecanismo de carga de archivos inseguro Descripción CVE-2023-25202 involucra un mecanismo de carga de archivos inseguro dentro de la aplicación Therefore, que es demasiado permisivo en los tipos de archivos que los usuarios pueden cargar. La aplicación solo bloquea las cargas de...

CVE-2025-4602

eMagicOne Store Manager para WooCommerce = 1.2.5 - Lectura Arbitraria de Archivos No Autenticada El plugin Administrador de Tienda eMagicOne para WooCommerce expone un punto final de protocolo de gestión remota ?connector=bridge que permite operaciones de eliminación de archivos en el servidor. E...

westone-CVE-2021-45232-scanner

westone-CVE-2021-45232-scanner Apache APISIX Dashboard earlier versions 2.10.1 has security vulnerability on unauthorized access. the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on...

CVE-2025-27558_Patching

CVE-2025-27558Patching Parche de la vulnerabilidad CVE-2025-27558 que había afectado a mi imagen de Linux. Incidente de Atlas: Conexión saliente inesperada 197.155.77.1 Esta carpeta documenta una anomalía de red real detectada en la máquina Atlas , un sistema Ubuntu monitoreado por Wazuh. Durante...

CVE-2024-6536

Description This script is a PoC for CVE-2024-6536, where a XSS is possible in the Zephyr Project Manager plugin for Wordpress. It requires authentication and privileges as a project manager administrator. Usage python3 CVE-2024-6536.py -u -p -w Example: python3 CVE-2024-6536.py -u user -p user -...

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468 Detailed Analysis and script Mitigation Strategies for CVE-2024-38124 and CVE-2024-43468 CVE-2024-38124: Windows Netlogon Technical Exploitation Context: In a real-world scenario, an attacker with access to the...

CVE-2026-101108

CVE-2026-101108 — OrdaSoft Vehicle Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101108 — OrdaSoft Vehicle Manager Free Joomla extension ≤ 6.5.7. Fixed in 6.5.8+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101108 Catalog| https://pocbit.org/pocs/ Component|...

CVE-2026-100752

CVE-2026-100752 — OrdaSoft Real Estate Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-100752 — OrdaSoft Real Estate Manager Free Joomla extension ≤ 6.7.8. Fixed in 6.7.9+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-100752 Catalog| https://pocbit.org/pocs/ Component|...

CVE-2026-100520-laranode-path-traversal

CVE-2026-100520 — Path Traversal → RCE in Laranode File Manager Authorized security research. PoC for defensive and educational use only. Authenticated path traversal in the file-manager upload endpoint of Laranode lets a low-privileged tenant write arbitrary files outside their own home director...

exploit_cve_2025_67303

exploitcve202567303 Crear PoC para CVE-2025-67303 El PoC original está en https://www.doyensec.com/resources/DoyensecAdvisoryComfyUIManagerRCEviaCustomNodeInstall.pdf...

Nexus-Repository-Manager-3-CVE-2020-11444-

This repository does not have a README...

CVE-2024-24141

CVE-2024-24141: Sistema-Gestor-de-Tareas-Escolares-InyecciónSQL-1 Prueba de ConceptoPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Prueba de ConceptoPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...