63601 matches found
CVE-2019-0708
CVE-2019-0708 Have fun...
VirtualBox-6.0.0-Exploit-1-day
VirtualBox 6.0.0 Exploit 1-day VBox bugs to be used CVE-2019-2525 : crUnpackExtendGetAttribLocation Information Disclosure CVE-2019-2548 : crServerDispatchReadPixels Integer overflow, leading to Heap overflow these bugs can be triggered when 3D Acceleration is enabled. First, before the...
CVE-2019-7192_QNAP_Exploit
QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit for now, you can read system files /etc/shadow, ssh private key, etc. Usage: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port Sample Output Vulnerability The vulnerabilities can be...
CVE-2019-9465
CVE-2019-9465 This is a demo Android application for CVE-2019-9465...
pulsexploit
pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708 Scanner PoC by @JaGoTu and @zerosum0x0. In this repo A scanner fork of rdesktop that can detect if a host is vulnerable to CVE-2019-0708 Microsoft Windows Remote Desktop Services Remote Code Execution vulnerability. It shouldn't cause denial-of-service, but there is no...
CVE-2019-11043-Docker
A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then...
CVE-2019-19781
CVE-2019-19781 Automated script for Citrix ADC scanner CVE-2019-19781 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubuntu &...
COMahawk
COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322 Video Demo https://vimeo.com/373051209 Usage Compile or Download from Release https://github.com/apt69/COMahawk/releases 1. Run COMahawk.exe 2. ??? 3. Hopefully profit or 1. COMahawk.exe "custom command to run" ie...
cve-2019-0708
cve-2019-0708 POC CVE-2019-0708 with python script! Video POC: https://www.youtube.com/watch?v=XVmCtUMELdU...
eximrce-CVE-2019-10149
eximrce Simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /root/lweximtest. Output will be slow depending on server's reply and not knowing how to properly use python's socket module. Would love a lesson on how to speed it up. Only...
Moodle-CVE-2019-3810
Moodle CVE-2019-3810 Moodle 3.6.2, 3.5.4, 3.4.7, 3.1.16 XSS PoC for Privilege Escalation Student to Admin. This is one of the past bugs that I discovered during past pentest in an academic institution. It was successful enough at the time to practically steal admin access and gain complete contro...
CVE-2019-0230
CVE-2019-0230 CVE-2019-0230 Exploit And POC...
Rails-doubletap-RCE
Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...
AOSP-DownloadProviderDbDumperSQLiWhere
AOSP-DownloadProviderDbDumperSQLiWhere PoC Exploiting SQL Injection in Android's Download Provider in Selection Parameter CVE-2019-2198 Security Advisory Android AOSP Download Provider SQL Injection in Query Selection Parameter CVE-2019-2198 Demo...
r00kie-kr00kie
r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...
CVE-2019-5782_CVE-2019-13768
https://googleprojectzero.blogspot.com/2019/04/virtually-unlimited-memory-escaping.html Exploits CVE-2019-7582 and CVE-2019-13768/P0 issue 1755 Targets Chrome 71.0.3578.98 Needed to update the original PoC to work on Windows 10 1909+. Also needed to increase reliability on a particular target...
dirty_sock
dirtysock: Linux Privilege Escalation via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available for research and education. F...
CVE-2019-0708
CVE-2019-0708 Goby support CVE-2019-0708 "BlueKeep" vulnerability check. Respect to @JaGoTu and @zerosum0x0 How to use 1. Download Goby http://gobies.org/ 2. Download and instrall npcap https://nmap.org/npcap/ 3. Scan network of 3389 port ScreenShots About Goby Goby - Make Cybersecurity More...