CVE-2022-22947

CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

CVE-2023-52251-POC

CVE-2023-52251-POC There is a Remote Code Execution vulnerability provectus/kafka-ui. There is no patch as of writing this, but the vendor is notified by us and the team over at VINCE without any response. Report was sent Sep 27, 2023 to provectus both via email and github security. Remediation W...

CVE-2024-24919

Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Overview This repository contains a tool for exploiting the CVE-2024-24919 vulnerability in Check Point Security Gateways. The tool is a multi-scanner that can identify vulnerable devices and a single-target exploit that can take full...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Remote Code Execution python usage: python CVE-2019-19781.py http://192.168.3.244 0x01 download NSVPX-ESX-13.0-47.22nc64.zip https://www.citrix.com/downloads/citrix-gateway/ configure static networ 0x02 nmap scan Scanning 192.168.3.244 65535 ports Discovered open port...

freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute...

freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute...

Critical: Red Hat Security Advisory: ipa security update

An update for ipa is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

perl_spreadsheet_excel_rce_poc

ParseExcel security vulnerabilitiy TL;DR: RCE from logic in parsing format strings. Short explanation on the exploit Root cause of the exploitation comes from calling eval to an unvalidated user input in Utility.pm...

CVE-2021-26121

CS-Cart templates.manage Server Side Template Injection Remote Code Execution Vulnerability Found by: Steven Seeley of 360 Vulcan Team Version: = 4.12.x latest Date: 2021-01-08 12:49 CVE: CVE-2021-26121 Disclosure Timeline 2021-01-26 – Sent to CSCart dev team 2021-01-27 – Notification of reciept...

CVE-2020-2551

CVE-2020-2551 Weblogic IIOP Deserialization Test Environment Weblogic10.3.6+jdk1.6 Packaged jar file Extraction code: a6ob Exploit Download the jar package, then use marshalsec to start a malicious RMI service, compile a local exp.java package payload; import java.io.IOException; public class exp...

CVE-2022-30190

CVE 30190 Amine TITROFINE | December 17, 2022 Follina CVE-2022-30190 is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution RCE attacks. It exists when MSDT is called using the URL...

CVE-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444 How to disable ActiveX controls on an individual system ? 1. To disable installing ActiveX controls in Internet Explorer in all zones, paste the following into a text file and save it with the .reg file extension: Windows Registr...

CVE-2023-23333

CVE-2023-23333 SolarView Compact through 6.00 downloader.php commands injection RCE nuclei-templates Burp Nuclei...

NotSecDrv

NotSecDrv - A PoC code for CVE-2018-7249 General Description An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race...

CVE-2021-24499

CVE-2021-24499 Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other wa...

eximrce-CVE-2019-10149

eximrce Simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /root/lweximtest. Output will be slow depending on server's reply and not knowing how to properly use python's socket module. Would love a lesson on how to speed it up. Only...

CVE-2022-1388-checker

CVE-2022-1388-checker Simple bash script to check multiple hosts for CVE-2022-1388 F5. + Uso: ./CVE-2022-1388.sh hosts.txt References https://support.f5.com/csp/article/K23605346 https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html...

USN-8932-1: curl vulnerabilities

Stanislav Fort discovered that curl did not properly clear AWS SigV4 authentication state when CURLOPTAWSSIGV4 was set to NULL. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2026-86409 Stanislav Fort...

GHSA-M6WQ-39M7-9XPP Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...

Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...