CVE-2021-21985-Checker

CVE-2021-21985 Checker. Simple Powershell implementation of @alt3kx nmap script. Usage .\CVE-2021-21985.ps1 vcenter.hostname.com Output TARGET VULNERABLE or TARGET NOT VULNERABLE...

EUVD-2026-85167

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader . The flaw is caused by an insecure permission configuration that allows regular users to modify the configuration file. This vulnerability could lead to arbitrary script execution with higher privil...

msxml4-remediation

MSXML 4.0 修复 PowerShell 用于修复与 Microsoft XML Core Services MSXML 4.0 相关的安全发现的 PowerShell 脚本，该版本不受支持且常被漏洞扫描器标记。 此脚本会取消注册 MSXML 4 的 .dll 文件并重命名它们。这可以修复漏洞，使其不再出现在 Qualys 扫描中。 背景 MSXML 4.0 已停止支持，我们现在主要使用 MSXML 6 此脚本的功能 取消注册 MSXML 4 DLL 并重命名这些 DLL 要求 Windows PowerShell 5.1 或更高版本 管理员权限 用法 使用提升权限的...

React2Shell-Vulnerability-Verification-Script

Script de verificación de vulnerabilidad React2Shell verifyreactvulnerability.py ¿Qué es este script? Este es un script Python simple e independiente creado para ayudarte a determinar rápidamente si tu proyecto se ve afectado por la vulnerabilidad crítica React2Shell también conocida como...

CVE-2026-5924

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and including, 2.1.3. This is due to the use of eval on user-controlled block content in the frontend JavaScript mapStyles...

CVE-2017-5638-Apache-Struts2

CVE-2017-5638 Apache Struts2 CVE-2017-5638 的 PoC 利用 PHP 代码示例 用法 php exploit.php "http://127.0.0.1:8080/example/index.action" "command" 使用风险自负...

CVE-2021-26084-patch-

CVE-2021-26084 patch CVE-2021-26084 patch provided by "Confluence Security Advisory - 2021-08-25" this is just a workaround for linux based servers, attlasian has provided a new fixed verssion if you don't want to upgrade just patch it ! instalation download the cve-2021-26084-update file, and ma...

CVE-2025-15696

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any user who later opens the...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH ServiceNow AI Agent Audit Script v1.1 Jan 2026 Secure Your AI Future – Enterprise-Grade Audit Tool with 2026 Updates This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global...

Samba-Exploit-CVE-2007-2447

🎬 This YouTube video 1️⃣ Scanning the target Nmap nmap -sS -sV -p 139,445 192.168.56.102 Expected result: 139/tcp open netbios-ssn Samba smbd 3.X 445/tcp open microsoft-ds Samba smbd 3.0.20-Debian 👉 Samba version: 3.0.20 This is vulnerable to CVE-2007-2447. 2️⃣ Identifying the Samba exploit...

cve-2019-11043.py

cve-2019-11043.py ExploitDB 概念验证的 Python 移植。 Python 移植的 ExploitDB 48182（仅用于教育目的） 本项目是 ExploitDB PoC 针对漏洞 48182 的 Python 移植。 它是为学习和研究目的而创建的。 ⚠ 免责声明 该脚本未经测试 ，因此可能包含错误或不正确的逻辑。 仅在安全、可控的环境 （如本地测试机）中使用此代码。 任何使用此代码的行为风险自负 。 请勿将其用于您没有所有权或未获得明确测试许可的系统。...

checkvulnCVE20205902

checkvulnCVE20205902 Un script de PowerShell para verificar la vulnerabilidad CVE-2020-5902 de una lista de IPs Las instrucciones están en el código ¡Mantén la seguridad!...

CVE-2019-0708poc

CVE-2019-0708poc 根据360Vulcan Team开发的CVE-2019-0708单个IP检测工具构造了个批量检测脚本而已 只写了个单线程的。。还没时间弄多线程。。...

CVE-2025-61229

CVE-2025-61229 Descripción Del blog del desarrollador: Los scripts de shell Before/After configurables por el usuario se ejecutan con privilegios elevados, con los permisos de Acceso Completo al Disco TCC de SuperDuper. Dado que esos scripts de shell son referenciados por los archivos de...

cve-2023-2745

如何使用 Сохраните файл как checkcve-2023-2745.py и дайте право на запуск: chmod +x checkcve-2023-2745.py Установите зависимость один раз: python3 -m pip install requests Запуск: python3 checkcve-2023-2745.py https://example.com...

CVE-2025-11833-PoC

Comprobador de CVE-2025-11833 python3 main.py --url http://localhost --username admin --loot Este repositorio es solo para fines educativos y de investigación. El autor no asume ninguna responsabilidad por el uso indebido. Siempre prueba los PoCs en un entorno controlado y aislado...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

CVE-2023-20209

I started looking at Cisco Expressway after I noticed quite a few of them on the internet during Red Team engagements, but never had the time during work to explore the product further. Initially I was looking for an auth bypass to chain into RCE but ran out of time and settled on a post auth RCE...

CVE-2025-24893

CVE-2025-24893 Script POC en Bash para la vulnerabilidad de RCE en XWiki Platform Ejemplo de uso: Configurar un listener de netcat: $ nc -nvlp Después ejecutar el script: $ chmod +x cve.sh $ ./cve.sh Versiones afectadas: Desde 5.4 hasta 15.10.11 Desde 16.0.0 hasta 16.4.1 Aviso legal Esta...