Metabase-cve-2021-41277

Metabase-cve-2021-41277 Metabase lectura arbitraria de archivos argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u url, --url url URL objetivo, p. ej.:"http://127.0.0.1" -f file, --file file Objetivos en archivo, p. ej.:"ip.txt" Uso ej1:python3 Metabase-cve-2021-41277.py -u...

CVE-2014-0094-test-program-for-struts1

Correspondencia de CVE-2014-0094 con struts1 Introducción Este documento resume el impacto de CVE-2014-0094 en struts1. A menos que se indique lo contrario, cada versión fue verificada con java 1.7.002, struts 1.3.10, apache-tomcat-6.0.39, FreeBSD 8.2. Además, bajo ninguna circunstancia se...

CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 Proof Of Concept This repository provides scripts to automatically deploy a WebDAV server on Ubuntu using Apache2 , and generate malicious.url shortcut files for use in phishing, red teaming, or lateral movement simulation. 📁 Contents setupwebdav.sh – Bash script to configure Apach...

cve-2017-0065

Exploiting Edge's read:// urlhandler Introduction This exploit was reported to Microsoft and I was acknowledged for doing so. The exploit has been patched on March 14th 2017 under names cve-2017-0065 and MS17-007 and will not work if related patches are applied. Sourcecode is provided for...

next_js_poisoning

CVE-2024-4698 is a cache poisoning vulnerability in Next.js that impacts versions 13.5.1 to 13.5.7, as well as 14.0.0 through 14.2.10. The issue arises when websites leverage the next/image?url= API with the ?url= parameter, enabling attackers to load images hosted on their own servers. These...

CVE-2021-41773

CVE-2021-41773 Fast python tool to test apache path traversal CVE-2021-41773 in a List of url Usage :- create a live urls file and use the flag "-l" python3 apachepathtraversal.py -l urls-list.txt...

CVE-2022-26134-cve1

CVE-2022-26134RCE Installation root@kitploit: git clone https://github.com/yigexioabai/CVE-2022-26134-cve1.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2022-26134RCE.py放到pocsuite3\pocs目录下 cd pocs Using pocsuite3 Single URL: root@kitploit: pocsuite -r CVE-2022-26134RCE.py -u ur...

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Project on CVE-2022-30190 exploitation and mitigation strategies 📌 About This repository contains my final project for ICT287, where I explore the CVE-2022-30190 "Follina" vulnerability. The project covers: Detailed analysis of the exploit Step-by-step execution proces...

CVE-2015-1427

CVE-2015-1427 Parameters -u single url -l specify url file -c specify command...

CVE-2022-26134

CVE-2022-26134 Practice writing PoC in Go Usage root@kitploit: go get -u -v github.com/wjlin0/CVE-2022-26134 CVE-2022-26134 -url https://example.com/ Build root@kitploit: git clone https://github.com/wjlin0/CVE-2022-26134 cd CVE-2022-26134 && chmod +x build.sh && ./build.sh...

CVE-2025-0133

Description: It is a POC for CVE-2025-0133 that is applicable only to PAN-OS firewall configurations with an enabled GlobalProtect gateway or portal. It checks issue on multiple URLs that accepts from file, with custom thread. You can also set you timeout and get results in a file. Example usage:...

HeartBleed-Vulnerability-Checker

HeartBleed-Vulnerability-Checker author = 'WaQas-JaMal' Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford [email protected] & The author disclaims copyright to this source code. ''' I have modified this script to take any input url file. Check it for valid tld from provided se...

poc-proxycommand-vulnerable

RCE via insecure /.ssh/config Use of tokens like %h, %p in ProxyCommand is quite popular to use tunnels and connection proxying using SSH. Vulnerable config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Note: in my initial assessment I was under the...

CVE-2021-42237-SiteCore-XP

CVE-2021-42237-SiteCore-XP Similarly, put the URLs to be detected in target.txt Register and modify the DNSLOG platform yourself...

CVE-2026-9082-PoC

python3 poc.py https://target.com...

CVE-2024-31982

CVE-2024-31982 Herramienta CVEHunter para la detección de vulnerabilidades y explotación de CVE-2024-31982 Instalación root@kitploit: git clone https://github.com/th3gokul/CVE-2024-31982.git cd CVE-2024-31982 pip install -r requirements.txt python3 cvehunter.py --help Uso root@kitploit: python3...

CVE-2021-42013

CVE-2021-41773 / CVE-2021-42013 Apache Vulnerability Scanner A comprehensive Python-based vulnerability scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. Overview CVE-2021-41773 and...

USN-8814-1 octavia vulnerabilities

It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...

shiro-cve-2010-3863

Apache Shiro Path Traversal CVE-2010-3863 Vulnerability Reproduction Local environment setup with Docker Open Yakit to capture packets Payload: /./admin/ Successful...

CVE-2020-3187-Scanlist

CVE-2020-3187-Scanlist - Cisco Batch scanning site. Disclaimer: I am not responsible for the use of this tool or any damages, DO NOT USE THIS FOR ILLEGAL PURPOSES. This tool was designed to scan for authorised assets to automate the check for this vulnerability on multiple cisco instances. Instal...