openocd

Welcome to OpenOCD OpenOCD provides on-chip programming and debugging support with a layered architecture of JTAG interface and TAP support including: XSVF playback to facilitate automated boundary scan and FPGA/CPLD programming; debug target support e.g. ARM, MIPS: single-stepping,...

motionEye-RCE-through-config-parameter

클라이언트 측 검증 우회를 통한 MotionEye RCE 요약 Docker에서 실행 중인 MotionEye 인스턴스에 대한 보안 테스트 중 웹 UI 내 클라이언트 측 검증이 우회될 수 있음이 확인되었습니다. 이를 통해 호스트 컨테이너에서 실행을 트리거할 수 있는 페이로드를 포함한 임의의 입력이 제출될 수 있습니다. 이 문제는 악용될 경우 원격 코드 실행RCE 위험을 초래합니다. 영향받는 버전 : 0.43.1b4를 포함한 모든 버전 패치 상태 : 아직 패치가 없음. 본 권고에서 해결 방법을 제공함. 프로젝트 참조 :...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600 Drupal RCE Credits to: File| Drupal Ver| Source| Comment ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708| poc1-a2u.py| 8|...

strelka

Releasesrelease | Documentationwiki | Pull Requestspr | Issuesissues !GitHub releaseimg-version-badgerepo !Build Statusimg-actions-badgeactions-ci !Pull Requestsimg-pr-badgepr !Slackimg-slack-badgeslack !Licenseimg-license-badgelicense Strelka is a real-time, container-based file scanning system...

CVE-2024-25292

RenderTune RCE CVE-2024-25292 취약점에 대한 개념 증명PoC입니다. RenderTune v1.1.4의 XSS교차 사이트 스크립팅 취약점으로 인해 공격자가 Upload Title 매개변수에 조작된 페이로드를 주입하여 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 이 저장소에는 취약한 애플리케이션 예제와 이에 대한 개념 증명PoC 익스플로잇이 포함되어 있습니다. PoC로는 프로세스를 자동화하는 Python 파일이 있습니다. 1. 취약점 개요: XSS를 통해 RCE를 가능하게 하는 취약점입니다. 제목에...

CVE-2020-6364

CVE-2020-6364 Remote code execution in CA APM Team Center Wily Introscope. Original advisory A deserialization vulnerability in CA APM Team Center leads to unauthenticated remote code execution on the server. When authenticating to the server a cookie is returned that starts with the infamous rO0...

CVE-2020-5902

CVE-2020-5902 Python script to exploit F5 Big-IP CVE-2020-5902 Examples Exploit local file read: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploit RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

Havoc-C2-SSRF-to-RCE

Havoc-C2-SSRF-to-RCE This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework...

scanginx

Scanginx Scanner For Nginx - Remote Integer Overflow Vulnerability Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

remote-control

Laravel用リモートコントロール 認証情報を共有せずにユーザーアカウントへのリモートアクセスを許可します。 インストール 設定 使用法 ルーティング リモートアクセスの作成 生成されたアクセストークンの使用 インストール Remote Control は composer 経由でインストールできます: composer require "katsana/remote-control" 設定 このパッケージは自動的にサービスプロバイダを登録します。 次に、Remote Control 設定ファイルを公開する必要があります: php artisan vendor:publish...

CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar README project base on https://github.com/Y4er/CVE-2020-2555 and weblogiccmd test on 12.2.1.4.0 and jdk 1.8.0221 Reference 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...

Node.js-CVE-2017-5941

NodeJS 안전하지 않은 역직렬화 취약점 데모 Node.js는 JavaScript로 서버 기능을 구현하는 데 사용되는 오픈 소스 런타임 환경입니다. Node.js 내 특정 소프트웨어 패키지에는 역직렬화를 처리하는 취약한 함수가 포함되어 있어, 클라이언트가 특수하게 조작된 쿠키를 제공하면 승인되지 않은 명령이 실행됩니다. 이 취약점은 재현되었으며, 잠재적으로 리버스 셸을 실행할 수 있습니다. 이는 클라이언트 요청의 쿠키에서 읽은 무결하지 않은 입력 데이터 때문에 가능합니다. 클라이언트는 자신의 쿠키를 수정하고, bash 명령을...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Custom Exploit : Foxit Reader version 9.0.1.1049 Use After Free with ASLR and DEP bypass on heap My Custom Exploit : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Custom exploit for Win 7 Has space for shellcode My custom ROP chain makes space for shellcode i...

CVE-2024-24926

CVE-2024-24926 CVE-2024-24926 Vulnerability affects the Brooklyn theme for WordPress Description: The CVE-2024-24926 vulnerability affects the Brooklyn theme for WordPress versions up to 4.9.7.6 and is related to deserialization of untrusted data CWE-502. This allows an attacker to send malicious...

CVE-2023-23333

CVE-2023-23333 SolarView Compact 6.00 이하 버전의 downloader.php 명령어 삽입 RCE nuclei-templates Burp Nuclei...

CVE-2021-43609-POC

Spiceworks Sort SQLi There's a SQLi in a sort parameter of Spiceworks. The full exploit chain is SQLi - file read - RCE. Demo Prerequisites apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce && bundle install Stage 1...

CVE-2018-18649

CVE-2018-18649 CVE-2018-18649 EXP For the EXP description, see: Gitlab Wiki API Remote Command Execution Vulnerability CVE-2018-18649...

CVE-2021-25646

Apache Druid Remote Code Execution CVE-2021-25646 by j2ekim Usage python exp.py -u --url -c --command python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn" Vulnerability Reproduction Article https://www.adminxe.com/2109.html Disclaimer Any direct or indirect consequences an...