CVE-2018-6574-POC

CVE-2018-6574 POC LINK Um POC simples para CVE-2018-6574 https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/...

CVE-2020-24186-exploit

CVE-2020-24186-exploit Script de ataque do CVE-2020-24186 Modo de uso do Exp: Comandos: Windows/Linux: python3 CVE-2020-24186.py -u -p Exemplo: python3 CVE-2020-24186.py -u http://127.0.0.1 -p /wordpress/2022/04/04/hello-world...

ExploitDev

ExploitDev Várias ferramentas, PoCs e experimentos relacionados ao meu blog em https://www.forrest-orr.net/...

inputcontrol

inputcontrol Uma aplicação boba de prova de conceito para CVE-2023-28197, submetida à Apple quando reportada. Isso combina bem com sua respectiva postagem no blog, "CVE-2023-28197: inputcontrol"...

CVE-2024-26230

कृपया k0shl गुरु का ब्लॉग देखें, k0shl गुरु की मदद के लिए धन्यवाद...

0-click-RCE-Exploit-for-CVE-2024-9932

CVE-2024-9932 / 0-क्लिक RCE एक्सप्लॉइट लेखक: Joshua Provoste https://x.com/JoshuaProvoste/status/1858329238153072668 यह रिपॉज़िटरी CVE-2024-9932 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है, जो Wux Blog Editor WordPress प्लगइन में एक बिना प्रमाणीकरण वाली मनमानी फ़ाइल अपलोड भेद्यता है, जिससे रिमोट...

CVE-2025-66024

CVE-2025-66024: XWiki ब्लॉग एप्लिकेशन का होम पेज पोस्ट शीर्षक के माध्यम से स्टोर्ड XSS के लिए संवेदनशील अवलोकन...

0x00sec_code

Código-fonte para os posts do 0x00sec.org Este repositório contém o código-fonte dos meus posts no 0x00sec.org. Remote Shell Post disponível em: Parte I : https://0x00sec.org/t/remote-shells-part-i/269/1 Parte II. Criptografe seu link: https://0x00sec.org/t/remote-shells-part-ii-crypt-your-link/3...

CVE-2015-2546-Exploit

CVE-2015-2546-Exploit Meu artigo sobre CVE-2015-2546: http://bobao.360.cn/learning/detail/3184.html Meu blog: http://whereisk0shl.top...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 – Beliebiger Datei-Upload führt zu Remote Code Execution RCE Produkt BiggiDroid – Simple PHP Blog CMS Produktseite: https://biggidroid.com/product/simple-php-blog/ Schwachstellentyp Beliebiger Datei-Upload Uneingeschränkter Datei-Upload Remote Code Execution RCE Schweregrad Kritisc...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: root@kitploit: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in...

cve-2022-23636-poc

CVE-2022-23626 - RCE Autenticado no Blog do m1k1o Execução Remota de Código Autenticada através de vulnerabilidade de upload de arquivo no Blog do m1k1o v1.3 e anteriores. Descrição O endpoint ajax.php?action=uploadimage não valida adequadamente os tipos de arquivos enviados, permitindo que um...

CVE-2021-4034

CVE-2021-4034 script bash autocontido, basta executar e pwn! com referência ao post do blog da Qualys https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Upload Arbitrário de Arquivos Não Autenticado Descrição: O plugin Wux Blog Editor para WordPress é vulnerável a uploads arbitrários de arquivos devido à validação insuficiente do tipo de arquivo na função 'wuxbtinsertImageNew' em versões até, e incluindo,...

Joomla! Component MMS Blog 2.3.0 - Local File Inclusion

A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1491 info: name: Joomla! Component MMS Blo...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...