cryptohackapp

cryptohackapp Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...

CVE-2021-23369

CVE-2021-23369 Handlebars CVE-2021-23369 Vulnerability pip install requests Enter the Url : Vulnerability Description The package handlebars before 4.7.7 are vulnerable to Remote Code Execution RCE when selecting certain compiling options to compile templates coming from an untrusted source...

cve-2022-22954

CVE-2022-22954 This package detects a subset of CVE-2022-22954 attempts and exploits, generates a notice, and also includes the exploit URI and the first 4KB of the data that was sent back to the attacker as a response. While detecting this attack is more straightforward from log analysis, this...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

Detection-script-for-cve-2021-23358

Detection-script-for-cve-2021-23358 Detection script for cve-2021-23358 I have created a Detection script for CVE-2021-23358 , which will detect the vulnerable version of node underscore be it installed as an open-source tool or just the libraries are being used. This script has three features, I...

CVE-2025-24893-RCE-PoC

Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Installation python3 -m pip install requirements.txt Usage Connecting python3 poc.py Example With debug set to False default python...

CVE-2025-24893

Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Usage Connecting python3 poc.py Example With debug set to False default python3 poc.py http://127.0.0.1:8080 Targeting...

CVE-2026-22785

CVE-2026-22785 Reproduction Tutorial Vulnerability Overview CVE : CVE-2026-22785 Impact : orval = 7.18.0 CVSS : 9.3 CRITICAL Type : Code Injection Vulnerability Principle orval Example python cvetool.py shell whoami python cvetool.py shell "node --version" python cvetool.py shell dir Scan files...

CVE-2024-4040

Exploit Code for CVE-2024-4040 Overview This exploit code targets the CVE-2024-4040 vulnerability, allowing unauthorized access to user accounts by reading and validating tokens stored in the "sessions.obj" file. If the tokens are valid, hackers can gain entry to the targeted accounts. Unlike oth...

CVE-2022-24086

CVE-2022-24682 PoC How does this detection method work? As stated on the advisories versions 8.8.x before 8.8.15 patch 30 update 1 are vulnerable to attacks, the template looks at the following versions: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" - "8.8.9" - "8.8.10" - "8.8.11" - "8.8.12" - "8.8.15" H...

react2shell-PoC

React2Shell Nuclei template for detecting React2Shell CVE-2025-55182 and CVE-2025-66478...

GenCrushSSTIExploit

EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...

CVE-2026-39387

CVE-2026-39387 — BoidCMS Authenticated File Upload to RCE via Template Injection Description BoidCMS -l -p Arguments Flag| Description| Example ---|---|--- -u, --url| Base URL of the target BoidCMS site| http://target.com -l, --user| Admin username| admin -p, --passwd| Admin password| password123...

cve-2025-24893-poc

CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-24893 , a critical unauthenticated Remote Code Execution vulnerability in XWiki. This exploit abuses a Groovy template injection in the SolrSearch endpoint to execute arbitrary commands — including reverse shells...

CVE-2022-22954

CVE-2022-22954 CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI Multiple vulnerability trigger point detection, multi-threaded batch detection, command execution, file writing // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution pytho...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei Template Description This repository contains a Nuclei template for detecting the CVE-2024-32030 vulnerability. This vulnerability allows for remote code execution via JMX Metrics Collection JNDI Resolution. Vulnerability Details ID: CVE-2024-32030 Name: JMX Metrics Collecti...

CVE-2024-7120-Exploit-by-Dark-07x

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

CVE-2025-34300POC

Sawtooth Lighthouse Studio has a template injection vulnerability CVE-2025-34300 Parameters: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 Examples: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检测; python .\CVE-2025-34300POC....

CVE-2023-22527

CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC Detect nuclei -v -t /path/to/template.yam; -u http://ip:port/ Exploit python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...