ezwinrar

ezwinrar Python tool exploiting CVE-2018-20250 found by CheckPoint folks : https://research.checkpoint.com/extracting-code-execution-from-winrar/ By crafting the filename field of the ACE format, the destination folder extraction folder is ignored, and the relative path in the filename field...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2026-39387

CVE-2026-39387 — BoidCMS Authenticated File Upload to RCE via Template Injection Description BoidCMS -l -p Arguments Flag| Description| Example ---|---|--- -u, --url| Base URL of the target BoidCMS site| http://target.com -l, --user| Admin username| admin -p, --passwd| Admin password| password123...

CVE-2022-24716

CVE-2022-24716 Exploit for the vulnerability: Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 https://www.sonarsource.com/blog/path-traversal-vulnerabilities-in-icinga-web/ Help: python3 exploit.py -h Usage example: python3 -u http://127.0.0.1:8080 -f /etc/passwd...

red-tldr

Red Team TL;DR English | 中文简体 What is Red Team TL;DR? red-tldr is a lightweight red team command lookup tool. It helps experienced red team operators quickly find the commands, techniques, and key points they need — like a man command built for offensive security. Starting from v0.5.0, red-tldr...

CVE-2024-9047-Exploit

CVE-2024-9047: Exploit for WordPress File Upload Plugin Description The WordPress File Upload plugin for WordPress is vulnerable to a Path Traversal vulnerability in all versions up to, and including, 4.24.11 via the wfufiledownloader.php file. This vulnerability allows unauthenticated attackers ...

dirtyfrag-arm64

dirtyfrag-arm64 arm64/aarch64 port of V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Tested on Ubuntu 24.04.4 LTS with linux-aws 6.17.0-1013-aws on AWS Graviton newest available as of this writing. Full writeup with AppArmor bypass analysis, hardening notes, and detection notes:...

CVE-2024-23339

CVE-2024-23339 취약점 개요 CVE-2024-23339 CVSS : 6.5 Jan 23, 2024 ProtoType Pollution in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utilit...

Myesve

myesve CVE-2024-38475 Exploitation Framework – Version 1.0 Disclaimer: This tool is intended for authorized security testing, educational research, and legitimate bug bounty programs only. Do not use it against systems you do not own or lack explicit permission to test. The authors assume no...

DLL_Injection_On_VLC

DLL Injection and CVE-2010-3124 Overview 🌱 This project explores the topic of DLL Dynamic Link Library injection and specifically focuses on the CVE-2010-3124. CVE-2010-3124 refers to an untrusted search path vulnerability found in VLC Media Player version 1.1.3 and earlier. Here are key points...

CVE-2026-30480

CVE-2026-30480: LibreNMS Local File Inclusion LFI via Path Traversal Overview A Local File Inclusion LFI vulnerability exists in the NFSen module of LibreNMS. An authenticated attacker can exploit path traversal sequences to include arbitrary PHP files from the server filesystem. Field| Value...

wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 20th Aug 2020 Wordpress Plugin 0day elFinder vulnerability is a well-know vulnerability, my script only changes path to "/wp-content/plugins/wp-file-manager/". Stop requesting fixes in script or something else for me. RTFM... References:...

Get-RBCD-Threaded

Get-RBCD-Threaded Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory Environments Based almost entirely on wonderful blog posts "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" by Elad Shamir and "A Case Study in...

CVE-2021-40438

CVE-2021-40438 exploit PoC with Docker setup CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-40438:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 Note: You can also use Image ID...

CVE-2024-27292

CVE-2024-27292 : Docassemble V1.4.96 Unauthenticated Path Traversal CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-27292 with Asychronous Performance. Installation git clone https://github.com/th3gokul/CVE-2024-27292.git cd CVE-2024-27292 pip install -r...

CVE-2026-71518

CVE-2026-71518 — Typemill Unauthenticated Authorization Bypass Path-equivalent URL variants bypass role-restricted media downloads Restriction is keyed on the raw request path; the file is read from the OS-resolved path — the two disagree At a glance · Summary · Root cause · Attack chain · Exploi...

CVE-2025-0108-PoC

CVE-2025-0108 Proof of Concept PoC This repository contains a Proof of Concept PoC for the CVE-2025-0108 vulnerability, which is an authentication bypass issue in Palo Alto Networks' PAN-OS software. The scripts provided here test for the vulnerability by sending a crafted HTTP request to the...

CVE-2021-41773

Apache 2.4.49 Path Traversal + Remote Code Execution CVE-2021-41773 Vulnerability Description This vulnerability affects versions of Apache HTTP Server 2.4.49. A path validation error allows remote attackers to perform Path Traversal using sequences like .%2e/ to access paths outside the configur...

Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

This repository does not have a README...

CVE-2023-33246-mitigation

CVE-2023-33246-mitigation This project is a Maven-based demonstration of mitigating CVE-2023-33246, a vulnerability in Apache RocketMQ. Project Structure org/example/Main.java: The main program file. org/apache/rocketmq/common/BrokerConfig.java: Modified version of the official RocketMQ 4.9.5...