Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager

CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Des...

SQL Injection Vulnerability in Integrated Academic Affairs Management System of Hunan Qiangzhi Technology Development Co. Ltd (CNVD-2024-41212)

Hunan Qiangzhi Technology Development Co., Ltd. is an education informatization service provider. A SQL injection vulnerability exists in the Integrated Academic Affairs Management System IAMS of Hunan Qiangzhi Technology Development Company Limited, which can be exploited by attackers to obtain...

Exploit for Improper Input Validation in Ivanti Endpoint_Manager

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...

Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...

Exploit for SQL Injection in Progress Whatsup_Gold

CVE-2024-6670 PoC for Progress Software WhatsUp Gold HasErrors...

SIM Wisuda 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : SIM Wisuda v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

Exploit for Improper Privilege Management in Progress Whatsup_Gold

CVE-2024-5009 PoC for Progress WhatsUp Gold SetAdminPassword P...

Exploit for Path Traversal in Progress Whatsup_Gold

CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetF...

Hfinger - Fingerprinting HTTP Requests

Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :- Its main objective is to provide unique representations fingerprints of malware requests, which help in their identification. Unique means here that each fingerprint should be seen...

Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale

Cybersecurity researchers have shed more light on a Chinese actor codenamed SecShow that has been observed conducting Domain Name System DNS on a global scale since at least June 2023. The adversary, according to Infoblox security researchers Dr. Renée Burton and Dave Mitchell, operates from the...

Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserializ...

Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserializ...

Exploit for OS Command Injection in Fortinet Fortisiem

CVE-2024-23108 POC Proof of concept exploit to blindly execut...

Vger - An Interactive CLI Application For Interacting With Authenticated Jupyter Instances

V'ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer , you've found Jupyter credentials, but don't know what you can do with them. V'ger is organized in a format that shoul...

Exploit for OS Command Injection in Fortinet Fortisiem

CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order C...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

Poc for CVE-2024-32002, the script made from the developer's t...

Exploit for CVE-2024-1655

CVE-2024-1655 Description ASUS ExpertWiFi EBM63, EBM68, a...

CVE-2024-3533

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...

CVE-2024-3533

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...

CVE-2024-3533

The public CVE-2024-3533 describes a cross-site scripting vulnerability in Campcodes Complete Online Student Management System v1.0, specifically in the academic_year_view.php file. The vulnerability arises from manipulation of the FirstRecord argument, enabling XSS. The issue is exploitable remo...