CVE-2023-43318

CVE-2023-43318 JetStream Smart Switch - TL-SG2210P v5.0/ Improper Access Control / CVE-2023-43318 + Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC + Twitter Vendor: Tp-Link http://tp-link.com Product: JetStream Smart Switch - TL-SG2210P Vulnerability Type: Incorrect Acces...

CVE-2022-30114

Fastweb FastGate 'cmproxy' buffer overflow CVE-2022-30114 Introduction This script is a Proof of Concept PoC of CVE-2022-30114 and causes a reboot of Fastweb FastGate home routers, both GPON and VDSL2 version. CVE-2022-30114 is a heap-based buffer overflow in the 'cmproxy' executable, a program...

CVE-2013-1081

This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Reproduce Environment Note: The environment needs support KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 root@kitploit: $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git...

CVE-2021-26855-PoC

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. CVE-2021-26855 ssrf simple use of golang exercises Affected version root@kitploit: Exchange Server 2013 is less than CU23 Exchange Server 2016 is less than CU18 Exchange Server 201...

CVE-2024-44542

CVE-2024-44542 Description: todesk v1.1 was discovered to contain a SQL injection vulnerability via the title parameter at /todesk.com/news.html. Vulnerability Type: SQL Injection Vendor of Product: todesk Affected Product Version: todesk - v1.1 Affected Component: todesk.com, news.html Attack...

cve-2022-22976-bcrypt-skips-salt

BCrypt Hash Check To assist with the mitigation steps for CVE-2022-xxxx, you can use this tool to check your database for hashes that need updating. After you've integrated the application with your database, the tool works in two steps. To demonstrate this a in-memory sample application is used...

macnoise v1.0.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

CVE-2025-10035_GoAnywhere

GoAnywhere CVE-2025-10035 Checker Description A lightweight Python checker that detects whether a GoAnywhere instance is vulnerable to CVE‑2025‑10035. This tool sends a crafted GET request with a randomized User-Agent using fake-useragent with a fallback list, does not follow redirects, inspects...

CVE-2025-49844-RediShell-AI-made-Revshell

CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...

CVE-2020-0423

Big thank you to all the other security research people publishing their work, allowing others to learn, and do independent research. Resources: Original exploit article via longterm.io: https://www.longterm.io/cve-2020-0423.html Repo from Github user 20000s, also looking into 2020-0423:...

CVE-2022-41082

CVE-2022-41082 This repository contains a proof-of-concept PoC tool for exploiting the OWASSRF vulnerability CVE-2022-41082 in Microsoft Exchange servers. The exploit allows attackers to execute arbitrary commands on the server, potentially compromising the system. Overview The tool leverages an...

CVE-2024-6387

CVE-2024-6387 Vulnerability Detection Program 1. Principle Obtain banner information via SSH connection, determine the version based on the banner information, and thereby confirm whether the vulnerability exists. 2. Highlights Colorful output Adjustable threads Progress bar display...

goIssue_kirkstone

OpenEmbedded-Core OpenEmbedded-Core is a layer containing the core metadata for current versions of OpenEmbedded. It is distro-less can build a functional image with DISTRO = "nodistro" and contains only emulated machine support. For information about OpenEmbedded, see the OpenEmbedded website:...

goIssue_dunfell

OpenEmbedded-Core OpenEmbedded-Core is a layer containing the core metadata for current versions of OpenEmbedded. It is distro-less can build a functional image with DISTRO = "nodistro" and contains only emulated machine support. For information about OpenEmbedded, see the OpenEmbedded website:...

cve-2003-0282

This is the README file for the 22 May 2004 public release of the Info-ZIP group's portable UnZip zipfile-extraction program and related utilities. unzip551.zip portable UnZip, version 5.51, source code distribution unzip551.tar.Z same as above, but compress'd tar format unzip551.tar.gz same as...

hibernate-orm

Hibernate ORM is a library providing Object/Relational Mapping ORM support to applications, libraries, and frameworks. It also provides an implementation of the JPA specification, which is the standard Java specification for ORM. This is the repository of its source code: see Hibernate.org for...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

CVE-2020-1350-Fix

KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...