CVE-2024-36104

CVE-2024-36104 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are solely the responsibility of the user. The tool author does not assume any responsibility. version = 18.12.14...

CVE-2020-17530-strust2-061

This repository does not have a README...

lede-17.01.3

lede-17.01.3 Version-contains-cve-2019-12272...

fastjson-rce-lab

Fastjson 1.2.83 RCE Lab Environment CVE-2026-16723 Disclaimer: This lab is intended solely for security research, teaching demonstrations, and defense construction in authorized environments. Testing unauthorized targets without permission may be illegal; users bear all responsibility for the...

CVE-2022-30513

CVE-2022-30513 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30513 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

linux-4.19.72_CVE-2022-36946

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: sudo gem install httpx sudo gem install docopt sudo gem install paint ruby exploit.rb http://dev.devvortex.htb...

CVE-2022-23935

Introduction CVE-2022-23935 exploit PoC exiftool version 12.37 Installation git clone https://github.com/0xFTW/CVE-2022-23935 cd CVE-2022-23935 chmod +x CVE-2022-23935.py pip3 install pwntools Usage ./CVE-2022-23935...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins This tool tests for vulnerability in nette/application. How to fix the vulnerability Composer Update dependency to...

PoC-CVE-2024-24034

CVE-2024-24034 Title: The S.I.L 3.0 is vulnerable to Open Redirect via the "hprinter" parameter. Date: 2024-01-11 Author: Elizeu Das Dores Vendor Homepage: https://www.setorinformatica.com/ Version: 3.0 POC CVE-2024-24034 The "hprinter" parameter redirects the user whenever an error occurs in the...

39646

39646 WordPress Plugin Advanced Video 1.0 - Local File Inclusion Update Original credit goes to evait security GmbH This script is a more robust version of the original exploit...

CVE-2023-23138

ruby-rail-properties CVE-2023-23138 This is a short view of ruby on rails properties misconfiguration sometimes developers forgot to disable this endpoint /rails/info/properties if this endpoint was enabled on the host, that's mean an attacker can see part/all of the following information:...

CVE-2022-23046

CVE-2022-23046 PHPIPAM 1.4.4 - SQLi Authenticated Orignal Exploit can be found here Original Exploit Author: Rodolfo "Inc0gbyt3" Tavares Tinker Script for CVE-2022-23046 I was having trouble getting the orginal script to run. Went ahead and tinkered with it for my use case. Used while completeing...

CVE-2024-3094

CVE-2024-3094 XZ-Utils Vulnerability Checker and Fixer This Bash script checks for vulnerable versions of xz-utils installed on your system and offers to replace them with a stable, uncompromised version. Requirements wget tar make sudo Usage 1. Ensure you have the required dependencies installed...

CVE-2024-6387

CVE-2024-6387 This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH.This script is a faster and simpler version of an OpenSSH vulnerability scanner. The tool leverages multi-threading to optimize scanning...

CVE-2022-31300

CVE-2022-31300 Haraj Script 3.7 - DM Section Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31300 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3...

CVE-2023-29923-Scan

CVE-2023-29923-Scan PowerJob =4.3.2 Unauthorized Access Vulnerability Detection Tool CVE-2023-29922...

CVE-2023-26256

CVE-2023-26255 CVE-2023-26256 POC FOFA: body="JIRA" && body="2.0.50" Usage: python3 CVE-2023-26256.py -h...

CRSprober

CRSprober Description This tool remotely detects the version of the OWASP Core Rule Set CRS used by a ModSecurity WAF. It also identifies the configured paranoia level PL of the CRS, providing insights into the WAF's security posture without requiring local access. Prerequisities Python 3 Usage...