CVE-2012-2982-Webmin-Exploit

Webmin 1.590 Remote Command Execution Exploit CVE-2012-2982 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2012-2982 , a remote authenticated command execution vulnerability affecting Webmin versions 1.590 and earlier. The vulnerability resides in the /file/show.cgi...

CVE-2026-28326-check

SolarWinds Access Rights Manager Unauthenticated RCE — скрипт обнаружения уязвимости Проверка состояния патча без аутентификации для CVE-2026-28326 — уязвимости удалённого выполнения кода без аутентификации в SolarWinds Access Rights Manager ARM, исправленной в ARM 2026.2.1 17.09.2026. CWE-798,...

Job-Manager-Disclosure

CV Filename Disclosure Scanner – CVE-2015-6668 This script automates the search for CV files such as .jpg, .png, .jpeg publicly exposed via the vulnerability CVE-2015-6668, related to the WP Job Manager plugin for WordPress versions ≤ 0.7.25. 🧠 Description The vulnerability allows knowing the exa...

CVE-2024-8743-PoC

CVE-2024-8743 PoC Background Proof-of-Concept script for WordPress plugin Bit File Manager version = 6.5.7 Authenticated Subscriber+ Limited JavaScript File Upload CVE-2024-8743 vulnerability Information Description: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for...

CVE-2023-6710

CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept PoC. This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks. Installatio...

CVE-2025-57819

CVE-2025-57819 — FreePBX 16 Endpoint Manager: неаутентифицированная SQL-инъекция с повышением до RCE Неаутентифицированная stacked SQL-инъекция в модуле Endpoint Manager FreePBX admin/ajax.php, параметр brand, CVE-2025-57819, затрагивающая FreePBX framework --vhost --root --cmd Как это работает 1...

CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

CVE-2024-0566

CVE-2024-0566 Smart Manager 8.27.0 - Post-Authenticated SQL Injection Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link:...

CVE-2023-6421

CVE-2023-6421 Download Manager 3.2.83 - Unauthenticated Protected File Download Password Leak Description The plugin does not protect file download's passwords, leaking it upon receiving an invalid one POC python3 CVE-2023-6421.py https://kubernetes.docker.internal No link generated for ID 1. No...

CVE-2021-26814

CVE-2021-26814 A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager v.4.0.0-4.0.3 through the API service. To run it, simply make the .py script executable and launch it with the required parameters. PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport SRCPORT -tip DEST...

CVE-2026-5430

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-5430 CVE-2026-5430 WSO2 API Manager 4.5.0 — WSO2 Механизм аутентификации JWT принимает токены, подписанные алгоритмами, отличными от явно настроенных или поддерживаемых. Это позволяет злоумышленнику создать JWT с неподдерживаемым...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

wordpress-auto-upload-shell

██╗ ██╗██████╗ ███████╗██╗██╗ ███████╗███╗ ██...

CVE-2022-22954-POC

CVE-2022-22954-POC VMware Workspace ONE Access formerly known as VMware Identity Manager aims to allow your employees to access SaaS, web, and native mobile applications faster through multi-factor authentication, conditional access, and single sign-on. Recently, the VMware official website...

FreePBX-SQLi-Exploit-Privilege-escalation

FreePBX: от неаутентифицированной SQL-инъекции до root-оболочки CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 Краткое резюме В этом руководстве документируется полная компрометация машины HTB Connected. Цепочка атак начинается с неаутентифицированной SQL-инъекции в FreePBX, которая...

poc-cve-xss-encoded-wp-inventory-manager-plugin

Update - 5/10/2023 The CVE-2023-2123 ID was reserved and the PoC was published in the WPScan website: https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 Details Title: Unauthenticated Reflected Cross-Site Scripting in WP Inventory Manager Plugin for WordPress CMS Date: 2023-04-...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device Privilege Escalation PoC This project demonstrates CVE-2024-23700, a privilege escalation vulnerability related to the Companion Device mechanism on Android. The PoC shows how an app can exploit the companion device association flow to obtain certain...

CVE-2025-57819

CVE-2025-57819 Overview of this vulnerability quoted from @jfinstrom here Around 2025-08-21 multiple FreePBX systems began showing errors and later confirmed compromises. Vendor Sangoma/FreePBX Security Team published an advisory on 2025-08-26 urging administrators to restrict public access to th...

CVE-2015-6668

CVE-2015-6668 Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3 Exploits IDOR vulnerability in Job Manager plugin for Wordpress. Tested on Python 3.11.9 References NIST CVE WPScan Vuln DB Setup and Usage Clone the repo, setup virtual environment if desired, install requests, and run...

engagement-mgr

Engagement Manager Engagement Manager — это веб-приложение для отслеживания проектов в области наступательной безопасности. Оно имеет современный интерфейс, построенный на Next.js, Prisma и PostgreSQL. Приложение включает календарь, проекты, клиентов, контакты, находки и операторов. Lee Baird...