ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can...

bash-4.2-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

GHSA-M65P-9J7Q-6W33 MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source

Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in...

MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source

Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in...

CVE-2019-12181

CVE-2019-12181 LPE Exploit For CVE-2019-12181 Serv-U FTP 15.1.6...

CVE-2024-3094-One-Liner

CVE-2024-3094 One Liner Vulnerability Checker This repository provides simple yet powerful one-liner scripts designed to help you quickly determine if your server is vulnerable to CVE-2024-3094, a critical security vulnerability found in certain versions of the xz utility. Additionally, we offer ...

CVE-2023-22515

CVE-2023-22515 How does this detection method work? This template looks at the following endpoints: - "BaseURL/dologin.action" - "BaseURL" - "BaseURL/pages" - "BaseURL/confluence" - "BaseURL/wiki" From these endpoints it will extract the version, if the version matches any of the below versions i...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2021-34371

CVE-2021-34371 python exploit - Neo4j 3.4.18 - RMI based Remote Code Execution RCE...

CVE-2026-37749

CVE-2026-37749 — CodeAstro Simple Attendance Management System 1.0 - SQL Injection Details Field| Info ---|--- CVE ID| CVE-2026-37749 Type| SQL Injection → Authentication Bypass Severity| Critical CVSSv3: 9.8 Vendor| CodeAstro Product| Simple Attendance Management System Version| 1.0 Discoverer|...

CVE-2021-41773-Exploit-Lab

CVE-2021-41773 — Exploit Development Lab Overview This project documents the research, reproduction, and Proof-of-Concept PoC development for CVE-2021-41773, a Path Traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability was reproduced in an isolated Docker laboratory...

CVE-2025-10035

CVE-2025-10035 How does this detection method work? Detects vulnerable GoAnywhere MFT instances by extracting version numbers from the login page and matching against affected version ranges. How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run t...

CVE-2022-41352

CVE-2022-41352 PoC How does this detection method work? As stated on the advisories an issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0, the template looks at the following versions: - "8.8.15" - "9.0" How do I run this script? 1. Download Nuclei from here 2. Copy the template to...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...

CVE-2023-27997

CVE-2023-27997 FortiGate VM64 7.2.0 is exploitable by this code. note that the code was written in a very stupid way. Proof of Concept $ python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 + generating shellcode + salt=b'25c2dcf2' + processing hash + finding hash in cache - not in cache...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple For educational purposes and authorized security testing only...

joomla_rce_CVE-2015-8562

joomlarceCVE-2015-8562 All versions of the Joomla! below 3.4.6 are known to be vulnerable. But exploitation is possible with PHP versions below 5.5.29, 5.6.13 and below 5.5. Démo : https://www.youtube.com/watch?v=twqYpn1ir4o...

linux-

linux- Modified version CVE-2022-0847 5.8 = Linux kernel 5.16.11 / 5.15.25 / 5.10.102...

POC-CVE-2026-19679

CVE-2026-19679 — insufficient sanitization of uploaded filenames input validation Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. POST /rest/auditFile with tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" returned HTTP 200 and registered AuditFile 1000002 — the shell-metachar filena...