cve-2022-26134

CVE-2022-26134 Implementation of CVE-2022-26134 This repository contains my implementation of the exploit for CVE-2022-26134. The version implemented here bypasses the isSafeExpression checks in versions such as 7.18.0. The exploit can be run in two modes: The first mode allows you to run one...

CVE-2024-25202

CVE-2024-25202 A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown functionality of the file search bar that called search-result.php and search-visitor.php . The vulnerability is Cross-Site-Scripting XSS...

CVE-2020-14295

CVE-2020-14295 CVE-2020-14295 proof of concept. The original post can be found at exploit-db. Install requirements python3 -m pip install -r requirements.txt Usage $ python3 cactisqlirce.py --help usage: cactisqlirce.py -h -t -u -p --lhost --lport Cacti 1.2.12 - SQL Injection / Remote Code...

CVE-2024-7593

CVE-2024-7593 Detection How does this detection method work? This template matches on the following versions, if there is a match then the host is considered vulnerable: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" To prevent producing any FPs it also matches on the below: - type...

CVE-2012-6066

CVE-2012-6066 FreeSSHD Remote Authentication Bypass Vulnerability freeSSHd 2.1.3 Version check : nmap -A...

xwiki__xwiki-rendering_CVE-2023-37908_14-10-3

XWiki Rendering XWiki Rendering is a generic Rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org software forge. They are released together and share the...

exploit-foxit-4.1.1-title-bof

This repository does not have a README...

CVE-2022-31297

CVE-2022-31297 Haraj Script 3.7 - Reflected XSS Exploit Title: Haraj Script 3.7 - Reflected XSS Date: 2022-06-13 CVE: CVE-2022-31297 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7 Tested on: LAMP, Ubuntu...

hfs-cve-2014-6287-exploit

HFS CVE-2014-6287 Exploit Tool Overview This repository contains a Python-based exploit tool designed to take advantage of the CVE-2014-6287 vulnerability in HTTP File Server HFS versions 2.3.x. This vulnerability allows an attacker to execute arbitrary commands on the server, potentially leading...

cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...

perwendel__spark_CVE-2018-9159_2-7-1

Spark - a tiny web framework for Java 8 NEWS : Spark 2.7.0 is out. Please try it out and report any bugs. com.sparkjava spark-core 2.7.0 Important - There is a vulnerability in older versions of Spark versions lower than 2.5.2. Please upgrade to the latest version. For documentation please go to:...

CVE-2022-22965

Spring Framework Vulnerabilities - CVE-2022-22965 List of vulnerable / non-vulnerable software https://github.com/NCSC-NL/spring4shell/blob/main/software/README.md Finding vulnerable code Prerequisites for being vulnerable to CVE-2022-22965: 1 Use of Spring Framework See PowerShell and bash scrip...

cve-2023-50164

CVE-2023-50164 Vulnerable versions Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 Versions where the vulnerability is fixed Struts 2.5.33 Struts 6.3.0.2 Search Script Windows/PowerShell For PowerShell 5.1 and newer. Written by Kjetil Sigvartsen at Norsk...

CVE-2022-24706

CVE-2022-24706 Apache CouchDB 3.2.1 - Remote Code Execution RCE Checker Usage: nmap -p 4369 --script CVE-2022-24706.nse --script-args cookie=monster,timeout=5000...

CVE-2024-42834

Exploit Title: INCOGNITO SAC STORED CROSS-SITE SCRIPTING XSS VULNERABILITY Date: 26 JULY 2024 Exploit Author: Etienne Supra Vendor Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Vendor has been informed and acknowledge the vulnerability...

CVE-2023-47437

CVE-2023-47437 Pachno Stored Cross-Site Scripting Vulnerability https://vulners.com/cve/CVE-2023-47437 Description: A vulnerability has been identified in Pachno allowing an authenticated attacker to execute a stored cross-site scripting XSS attack. Vulnerable forms: Comments Affected Versions:...

linux-3.0.35_CVE-2019-10220

Linux kernel release 3.x http://kernel.org/ These are the release notes for Linux version 3. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

CVE-2024-6387-OpenSSH-Vulnerability-Checker

CVE-2024-6387-OpenSSH-Vulnerability-Checker This repository contains a Bash script to check the OpenSSH version on Ubuntu systems and determine if it's vulnerable to known security issues. Features Checks the installed OpenSSH version on the system. Determines if the version is vulnerable to know...

inspec-log4j

inspec-log4j This profile scans for vulnerable versions of Log4j Core JAR files directly on the file system, and embedded in WAR files. Running the profile locally git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Running the profile against a remote SSH target Ensu...

CVE-2020-14882_Exploit_Gui

CVE-2020-14882ExploitGui The tool is for authorized use only. I bear no responsibility for unauthorized attacks that lead to criminal cases. Please be familiar with the Cybersecurity Law. During a penetration test, I encountered 14882 and couldn't find a usable GUI POC, so I refactored it. I...