CVE-2019-1619

CVE-2019-1619 인증 우회에 필요한 토큰을 생성하는 PowerShell 스크립트입니다. 필자는 침투 테스트 중 CVE-2019-1619에 취약한 서버를 발견했습니다. 제한된 접근 권한으로 인해 Metasploit 모듈을 사용할 수 없어 수동으로 익스플로잇을 진행했습니다. 토큰 생성을 자동화하기 위해 이 스크립트를 작성했습니다. 해당 CVE의 전체 문서는 https://github.com/pedrib/PoC/blob/master/advisories/Cisco/cisco-dcnm-rce.txt에서 확인할 수 있습니다...

Daily Habit Tracker 1.0 - SQL Injection Vulnerability

Exploit Title: Daily Habit Tracker 1.0 - SQL Injection Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17118/daily-habit-tracker-using-php-and-mysql-source-code.html Version: 1.0 Tested on: Debian CVE :...

Exploit for OS Command Injection in Cacti

Command injection vulnerability in Cacti CVE-2023-39362 - Po...

Exploit for Deserialization of Untrusted Data in Spip

This PoC was wrote quickly, it's nothing special. This e...

PolyAsciiShellGen

It is an offensive tool for x86 platforms. The primary CVE ID present in the provided context is not explicitly stated, but the tool is related to bypassing MSB data filters for buffer overflow exploits on Intel x86 platforms, as described in the paper "Bypassing MSB Data Filters for Buffer...

EGYWEB (Mantrac) <= Remote File Disclosure Exploit

database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...

Pika CMS <= (showSource.php) Local File Inclusion

Exploit for php platform in category web applications Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...

Pika CMS Local File Inclusion

Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 My + Author...

PHPizabi v0.848b C1 HFP1 Remote Privilege Escalation Vulnerability

Exploit for unknown platform in category web applications ================================================================== PHPizabi v0.848b C1 HFP1 Remote Privilege Escalation Vulnerability ==================================================================...