CVE-2018-14772

CVE-2018-14772 información Este es un exploit PoC de ejecución remota de código para CVE-2018-14772, una vulnerabilidad que descubrí en la plataforma de intercambio de archivos pydio. Requiere credenciales de administrador de la aplicación pydio para funcionar. Puedes ejecutar el exploit de la...

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

Fortinet-CVE-2022-40684

Fortinet-CVE-2022-40684 Descripción de la herramienta Herramienta de explotación rápida para CVE-2022-40684. Código para principiantes; si hay problemas, no dudes en abrir un issue. Uso main -t http://127.0.0.1 -u admin -f path-of-ssh-key.pub Aviso legal Esta herramienta está destinada únicamente...

CVE-2015-1397-Magento-Shoplift

CVE-2015-1397-Magento-Shoplift Detalles de la vulnerabilidad Vulnerabilidad como se ve en HackTheBox - SwagShop Etapa 1 = exploit.py Obtener credenciales de administrador para el panel de control de Magento CMS Etapa 2 = postauth.py Con las credenciales obtenidas de exploit.py añadidas a...

CVE-2026-88808

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same...

CVE-2021-22911-rust

CVE-2021-22911 关于此CVE的Rust概念验证。用作 https://tryhackme.com/room/rocket 的一部分，这是一个在TryHackMe学习平台上的CTF从启动到root的挑战。 使用前，更新main.rs中的常量并运行，它应该可以直接工作。要求您拥有管理员电子邮件地址和用户名，并且未启用MFA。 基于 https://www.exploit-db.com/exploits/49960，一个依赖于启用MFA的Python实现（并且对于此版本的RocketChat无法直接使用）。...

Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure

An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48166 info: name: Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure author: ritikchaddha...

Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48164 info: name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information...

CVE-2024-3400

CVE-2024-3400 PoC solo con fines educativos. úsalo únicamente en servidores que tengas permiso de probar. Cómo usar dependencias: $ pip install rich escanear targets.txt: $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36... - Checki...

CVE-2022-3552

CVE-2022-3552 In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling=4.22.1.5" and you will have to have valid admin credentials. If you have the situation above, here are the steps you have to take in order to get the juicy RCE: Create a python virtual...

CVE-2023-23752

CVE-2023-23752 关于 此漏洞利用可实现认证绕过，泄露管理员用户名和密码，同时也会泄露 MySQL 配置的用户名、密码、主机和数据库 仅影响版本 4.00 = 4.28 用法 usage: exploit.sh -h -u URL -t TARGETS CVE-2023-23752 - Joomla! 认证绕过信息泄露 options: -h, --help 显示此帮助信息并退出 -u URL, --url URL 要扫描的单个 URL -t TARGETS, --targets TARGETS 包含多个要扫描的 URL 的文件 概念验证 POC 单个目标 bash...

Tenda-F3-V4

Tenda F3 路由器漏洞利用与文件下载器 该项目是一个工具，用于通过未经身份验证的漏洞（CVE-2020-35391）从 Tenda F3 路由器（v3/v4）下载各种文件。它允许你从易受攻击的路由器获取配置文件、系统日志和闪存转储。 概述 该脚本利用了 Tenda F3 路由器中发现的一个漏洞，使攻击者无需认证即可下载敏感文件。具体来说，可以下载以下文件（我正在研究增加更改密码的可能性）： 配置文件 RouterCfm.cfg（包含所有明文信息） 系统日志文件 RouterSystem.log 闪存转储 RouterFlash.bin 从配置文件中提取管理员用户名和密码 功能特点...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool ⚠️ ADVERTENCIA Esta herramienta es solo para fines educativos y de pruebas autorizadas. No utilizar en sistemas sin permiso explícito del propietario. 📋 Descripción Herramienta de detección para CVE-2026-3055 que identifica...

CVE-2026-1459-POC

CVE-2026-1459-POC POC para el CVE-2026-1459 cuyo payload cambia la contraseña SSH de root. Requiere credenciales de administración válidas, cambia la contraseña de root temporalmente; reiniciar restablecerá la contraseña de root. Funciona en VMG3625-T50B y similares, se garantiza su funcionamient...

SimpleCTF-UpdatedExploit

CMS Made Simple = 2.2.10 Exploit de Inyección SQL Descripción general Este script de Python explota una vulnerabilidad de inyección SQL sin autenticación en CMS Made Simple = 2.2.10 CVE-2019-9053. El exploit extrae información sensible como la sal salt, nombre de usuario, correo electrónico y...

CVE-2026-76448

A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...

CVE-2026-76425

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due to insufficient validation of certain parameters that are concatenated directly into an SQL query. An attacker could...

CVE-2026-76426

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. This vulnerability is due to insufficient validation of specific parameters that are then concatenated into an SQL...

CVE-2026-20283

A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. This vulnerability is due to insufficient validation of user-supplied input in IPsec Open API calls. An attacker could exploit...

CVE-2026-20235

A vulnerability in the API of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to view sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient...