CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Server-side Template Injection POC for Vmware CVE-2022-22954 Use this one line GET request!! This will execute cat /etc/passwd...

CVE-2022-22639

Details See Blog: https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html Exploitation of CVE-2022-22639 1. Compile with command: clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...

CVE-2024-50803-Redaxo

CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A stored cross-site scripting XSS vulnerability was found in Redaxo versions 5.18.0, allowing attackers with sufficient privileges to upload a malicious SVG file through the mediapool feature. Published a write-up :...

CVE-2018-11759

CVE-2018-11759 Proof of concept Description The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported b...

fortipwn

fortipwn Forti CVE-2022-40684 enumeration script built in Rust. Uploads an SSH public key into authorizedkeys, allowing an attacker to SSH into a server running FortiOS as admin. Usage $ ./fortipwn Build $ git clone https://github.com/Grapphy/fortipwn/ $ cd fortipwn $ cargo build --release $ cd...

commvault-cve2025-34028-check

infra-monitor infra-monitor is a lightweight Nmap NSE script for silently testing response consistency across web infrastructure routes. It helps detect anomalies in access control, configuration discrepancies, or potential inconsistencies in how different endpoints respond. This tool is designed...

gardyn

Summary In February 2025 I conducted security research on a Gardyn Home 4.0 device. During my research, I discovered multiple vulnerabilities and poor security practices. By leveraging these vulnerabilities an attacker may be able to gain system level access to a Gardyn device and use it to stage...

smart-contract-attack-vectors

Smart contract attack vectors The goal of this repository is to compile all possible smart contract vulnerabilities and resources for learning about them. Feel free to submit a pull request, with anything from small fixes to docs or tools you'd like to add. List of Security Vulnerabilities Access...

php_reverse_shell

This repository does not have a README...

Snoopy

| || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 "Amy, technology isn't intrinsically good or evil. It's how it's used. Like the Death Ray." -Professor Farnsworth Welcome to Snoopy; a...

CVE-2019-12102-Scanner

CVE-2019-12102 Scanner The CVE-2019-12102 Scanner is an automated tool to scan for the Unauthenticated File Upload / File Exposure vulnerability in Kentico CMS versions 11 to 12. This vulnerability is caused by improper access control on the endpoint...

CVE-2026-98770

A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...

CVE-2024-22889-Plone-v6.0.9

Product: Plone CMS Version: v6.0.9 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-22889 Description: Due to incorect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via...

CVE-2026-98769

A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...

BitUnlocker

BitUnlocker Downgrade Attack A proof of concept for accessing BitLocker-encrypted disks in under 5 minutes on fully patched Windows 11 machines through a boot manager downgrade attack, leveraging the SDI vulnerability originally documented as CVE-2025-48804. The July 2025 patch fixes this in...

CVE-2024-45519

CVE-2024-45519 SMTP Vulnerability Exploit Script Overview This script checks for vulnerabilities in an SMTP server and, if found, exploits the vulnerability by establishing a reverse shell connection to your machine. Features Port Checking: Verifies if the target SMTP port is open. Vulnerability...

CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection Download PoC script git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 Run exploit USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py...

CVE-2025-4162030

Security Advisory: CVE-2025-4162030 This security summary was provided by CoPilot ^1^. The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be...

CVE-2024-21893.py

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...