CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Stored Cross-Site Scripting XSS 📋 Overview Field| Details ---|--- CVE ID| CVE-2023-37190 Vulnerability| Stored Cross-Site Scripting XSS Affected Product| Issabel-PBX Affected Version| 4.0.0-6 Severity| Medium CVSS v3.1 Score: 5.4 Discovered By| Sahil Ojha...

CVE-2021-36798

CVE-2021-36798 CVE-2021-36798 Cobalt Strike 4.3 DoS Usage python3 CVE-2021-36798.py BeaconURL Cripple Cobalt Strike with just one packet Tested on 4.3, 4.2 References: https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/...

CVE-2012-2122-Home-Lab

ENGLISH BELOW CVE-2012-2122 MySQL Authentication Bypass Home Lab Lab นี้เป็นตัวอย่างสาธิตช่องโหว่ CVE-2012-2122 - MySQL Authentication Bypass เกิดจากข้อผิดพลาดในการเปรียบเทียบค่ารหัสผ่านใน MySQL เวอร์ชัน 5.5.23 หรือต่ำกว่า เมื่อผู้โจมตีส่งรหัสผ่านผิดซ้ำ ๆ หลายครั้ง MySQL...

CVE-2024-6387-exploit

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a Python script that uses Nmap to scan a list of domains for vulnerable SSH versions. It checks multiple ports for SSH services and identifies versions that are known to have security vulnerabilities. Features Scans multiple domains from ...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

CVE-2020-11444

CVE-2020-11444 Nexus 3 Unauthorized Access Exploit Script For more exploit scripts, see: https://github.com/zhzyker/exphub Readme +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Arbitrary File Read Affected Versions Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Usage python3 CVE-2020-17519 --help View usage help python3 CVE-2020-17519 -u...

OpenSSH-Vulnerability-test

OpenSSH CVE-2024-6387 Vulnerability Checker Overview This C program scans specified IP addresses or network ranges to check if the servers are running a potentially vulnerable version of OpenSSH. It checks if the SSH port default is 22 is open, retrieves the SSH banner, and determines if the serv...

ivanti-automationmanager-exploit

PoC for CVE-2022-44569 for Ivanti Automation Manager, it took Ivanti more than a year to get a fix out. Ivanti told me it's fixed in Ivanti Automation 2023.4... https://github.com/rweijnen/ivanti-automationmanager-exploit/assets/7575747/818f11e1-0e86-4d91-8ce1-8949e45cfd8c...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-30998 Description: Vulnerable to SQL Injection via 'email' parameter. Affected...

CVE-2024-23746

CVE-2024-23746 Miro Desktop 0.8.18 on macOS allows Electron code injection. PoC signature and version: tool used to explore the vulnerability: https://github.com/r3ggi/electroniz3r verify if is vulnerable: inject a Blind Shell: References...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

CVE-2025-24893

CVE-2025-24893 XWiki RCE Vulnerability Analysis Environment Setup 1. Running XWiki 15.10.10 Environment docker-compose up -d 2. Accessing XWiki URL: http://localhost:8080 Proceed with testing after completing the initial setup Create an admin account after accessing the initial page Install XWiki...

apache__camel_CVE-2018-8041_2-20-3

Apache Camel Apache Camel is an Open Source integration framework that empowers you to quickly and easily integrate various systems consuming or producing data. Introduction Camel empowers you to define routing and mediation rules in a variety of domain-specific languages DSL, such as Java, XML,...

CVE-2021-42013

CVE-2021-41773 / CVE-2021-42013 Apache Vulnerability Scanner A comprehensive Python-based vulnerability scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. Overview CVE-2021-41773 and...

mac0352-ep4

mac0352-ep4 Apache HTTP Server 2.4.23 vulnerability study CVE-2016-8740...

CVE-2021-33558

CVE-2021-33558 Reference: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 Payload: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

ssh_exploiter_CVE-2024-6387

sshexploiter CVE-2024-6387 with auto ip scanner and auto expliot OpenSSH Vulnerability Checker & Exploiter This Python script checks if servers are running vulnerable versions of OpenSSH and attempts exploitation if possible. Features SSH Version Detection : Retrieves SSH banner to determine the...

CVE-2024-34470

CVE-2024-34470 HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusion...

CVE-2021-42013-LAB

CVE-2021-42013-LAB Apache HTTP Server 2.4.50 - RCE Lab exploit.sh :- https://github.com/jas9reet/CVE-2021-42013-LAB/blob/main/exploit.sh Usage docker pull jas9reet/cve-2021-42013-lab docker run -dit -p 8088:80 jas9reet/cve-2021-42013-lab Vulnerable Application Access VICTIM-IP-ADDRESS :8088...