Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220

Chamilo-LMS-Carga-de-Archivos-No-Autenticada- Carga de archivos sin restricciones en la funcionalidad de carga de archivos grandes en /main/inc/lib/javascript/bigupload/inc/bigUpload.php en Chamilo LMS ' dollarboysushil.php .png Luego podemos cargar este archivo ejecutando el siguiente comando $...

CVE-2024-24590-ClearML-RCE-CMD-POC

ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...

CNVD-C-2019-48814-CNNVD-201904-961

CNVD-C-2019-48814 y CNNVD-201904-961 Gracias a t00ls-ximcx0101 por proporcionar el script CNVD-C-2019-48814 POC Summary Los enlaces relacionados son los siguientes: El artículo de Jian Shu del maestro 清水川崎: https://www.jianshu.com/p/c4982a845f55 Reenviado por 安全祖师爷: https://dwz.cn/2GQvbUae Debido...

CVE-2022-26134

CVE-2021-46422 RCE Instalación git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2021-46422 RCE.py放到pocsuite3\pocs目录下 cd pocs Uso de pocsuite3 URL única: pocsuite -r CVE-2021-46422 RCE.py -u url Múltiples URLs: pocsuite -r...

Rig-Exploit-for-CVE-2018-8174

Rig-Exploit-for-CVE-2018-8174 Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden iframe that redirects victims to Rig’s landing page, which includes an exploit for CVE-2018-8174 and shellcode. Th...

CVE-2016-10033

CVE-2016-10033 Remote Code Execution vulnerability in PHPMailer. More about CVE-2016-10033: CVE-2016-10033 Wiki...

CVE-2022-29464

WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is a serious flaw in WSO2. The flaw is an unauthorised, unconstrained arbitrary file upload that enables unauthorised users to upload malicious JSP files to WSO2 servers and get Remote Code Execution RCE. the vulerable upload rou...

CVE-2022-20186

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE—Versión modificada Modificado a partir del proyecto en https://github.com/chvancooten/follina.py, permite personalizar el archivo de plantilla docx, facilitando su uso en ataques de phishing en escenarios reales. Después de editar tu propio documento d...

bluekeep

Description This script checks multiple IP addresses for the BlueKeep vulnerability CVE-2019-0708, which is a critical Remote Desktop Protocol RDP vulnerability found in older versions of Windows operating systems. The vulnerability allows attackers to remotely execute code on a target machine...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - Ejecución remota de código autenticada en GiTea Un script para explotar CVE-2020-14144 - Ejecución remota de código autenticada en GiTea mediante ganchos de git Características Generación automática de payload de shell inversa desde IP y PUERTO Subir script de shell personalizado...

freemarker_RCE_struts2_s2-061

freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE script de prueba python freemarkerRCEstruts2s2-061.py...

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

WSO2RCE

WSO2RCE The CVE-2022-29464 affects some WSO2 products such as WSO2 API Manager and WSO2 Open Banking , allowing arbitrary file upload and remote code execution. Affected Products: WSO2 API Manager 2.2.0, up to 4.0.0 WSO2 Identity Server 5.2.0, up to 5.11.0 WSO2 Identity Server Analytics 5.4.0,...

IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

CVE-2024-40711-Exp

Usos .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE La dirección IP objetivo de Veeam Backup and Replication --vp, --targetveeamport=VALUE El puerto objetiv...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Simulador de Explotación de Ejecución Remota de Código RCE en Apache Parquet Captura de pantalla de demostración Interfaz del simulador que muestra la cadena de explotación 📌 Resumen Este repositorio contiene una simulación educativa de CVE-2025-30065, una vulnerabilidad...