375800 matches found
CVE-2018-16763_FuelCMS-1.4.1_RCE
CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Exploit This works by exploiting the PHP filter parameter which allows you to use the system...
system_bt_AOSP10_r33_CVE-2020-0380
Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...
ghosttester
Testing Script for the Glibc GHOST Vulnerability CVE-2015-0235 A little script I found to test the Glibc GHOST Vulnerability CVE-2015-0235. The usage is quite simple. Just clone or download the script to your server/desktop and start it like this: Debian/Ubuntu gcc ghosttest.c -o ghosttest or:...
CVE-2020-17519
CVE-2020-17519 Log Traversal Tool A Python tool that uses a directory traversal technique to request log files from a target URL. It displays real-time progress, supports proxy configuration, and optionally saves valid responses. Features Directory Traversal with Configurable Depth Uses a...
CVE-2025-5961
CVE-2025-5961 Migration, Backup, Staging β WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...
CVE-2023-45185
CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Remote code execution via insecure deserialisation. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions uses insecure...
patch-CVE-2026-04321
Patch: CVE-2026-04321 Vulnerability Details CVE : CVE-2026-04321 Product : Zyxel firewall Description : OS command injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-28 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CIS...
CVE-2026-98583
A flaw was found in the Linux kernel's Marvell NFC Near Field Communication driver. During firmware download operations, the driver removes packet headers and reads command data before verifying that the received packet length is valid. An attacker could exploit this vulnerability by submitting a...
CVE-2023-36123
CVE-2023-36123 For demonstration purposes only. Exploit works on all Versions of Plain Craft Launcher 2. Download Custom.xaml and import into Plain Craft Launcher 2,then click "Run Command". https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...
CVE-2023-46818
CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash Introduction ISPConfig versions = 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records parameter in the /admin/languageedit.php endpoint. A malicious authenticated admin user can exploit this to...
CVE-2021-41730
TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...
CVE-2009-0347
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2009-0347 Run bellow command to check CVE-2009-0347 -h Configurations 2. We integrated with the Telegram API to receive...
CVE-2026-58455-PoC
CVE-2026-58455 β Dockwatch Unauthenticated RCE auth bypass + command injection Proof-of-concept for CVE-2026-58455 : unauthenticated remote code execution in Dockwatch by Notifiarr, a self-hosted Docker container management web UI. Affects all versions through 0.6.567. Root cause verified from...
CVE-2026-42978-PoC-Research
π‘οΈ CVE-2026-42978-PoC-Research - Find and Fix Windows Security Risks π Welcome to Your Security Companion This application helps you check if your Windows computer has a specific security weakness called CVE-2026-42978. This weakness involves a part of Windows called Push Notifications WpnService...
CVE-2026-39987.py
CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. HOW TO USE : The only change it has to be made is to the change the HOST variable in the script. After changing the HOST variable execute the script in your Terminal like the...
cover
Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install Β· Quick start Β· Policies Β· Monitoring Β· Pi / OMP Β· Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...
CVE-2019-0708
CVE-2019-0708 Blue Screen PoC Windows 7 64-bit has been testedγ Command: python crashpoc.py ip 64 https://github.com/n1xbyte/CVE-2019-0708/ Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public...
PoC-CVE-2019-10743
Zip Slip Demo This project demonstrates the Zip Slip vulnerability CVE-2019-10743 using the vulnerable version of the mholt/archiver package. What is Zip Slip? Zip Slip is vulnerability that was uncovered by the security researchers from Snyk. It was found that the vulnerability is impacting...
CVE-2023-37073
CVE-2023-37073 Telnet default credentials can lead to information disclosure and denial-of-service DoS attacks. Steps To reporduce This affect the AP AR-5310 Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Information disclosure through Telnet default credentials When y...