111830 matches found
spring-rce-poc
spring-rce-poc Testing CVE-2022-22968 Simple app vulnerable to CVE-2022-22968 Dockerfile could be used to build it on vulnerable version of Tomcat 9.0.59 exploit.sh is a shell script which is trying to exploit this cve on 8080 port of localhost If attack with exploit.sh was succesfull, on context...
XSS-CVE-2022-30489
WAVLINK WN535G3 POST XSS Use CVE-2022-30489 PAYLOAD POST /cgi-bin/login.cgi HTTP/1.1 Host: 98.127.66.193 Content-Length: 255 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://98.127.66.193 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 Windows NT 10.0;...
text4shell-exploit
Text4shell-exploit This is a Proof of Concept exploiting the vulnerability in Apache Commons Text CVE-2022-42889 Vulnerable versions : 1.5.0 to not including 1.10.0 Impact Successful exploitation of this vulnerability allows an unauthenticated attacker to execute arbitrary code on the vulnerable...
spring-rec-demo
spring-rec-demo The demo code showing the recent Spring4Shell RCE CVE-2022-22965 explained in Datawiza's technical blog: https://www.datawiza.com/blog/technical/understanding-spring4shell-rce-from-an-engineers-perspective/...
CVE-2022-42889
CVE-2022-42889 Python script for CVE-2022-42889 To test this locally follow the docker POC: https://github.com/karthikuj/cve-2022-42889-text4shell-docker For a PHP version of this: https://github.com/ClickCyber/cve-2022-42889 If youre running this and exploiting it locally, the IP you need to use...
project_BIT_nmap_script
Python program to detect vulnerability with CVE-2022-32073 in large networks This python program runs nmap on an address passed as an argument, by default it runs on all ports but port number can also be given as an argument. It runs nmap with custom created wolfsshversion.nse scripts which uses...
cve-2022-23131
cve-2022-23131 poc...
CVE-2022-40140-SCANNER
This repository does not have a README...
Follina-CVE-2022-30190-Unofficial-patch
Follina-CVE-2022-30190-Unofficial-patch- An Unofficial Patch Follina CVE-2022-30190 patch by microsoft Guidelines. for more details goto : https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ About Program this program creates a...
text4shell-CVE-2022-42889
This repository does not have a README...
CVE-2022-26318
This repository does not have a README...
CVE-2022-4262
CVE-2022-4262 Full Analysis including root cause, PoC, exploit and slides of CVE-2022-4262. Disclaimer This repository is intended solely for educational purposes and must not be used for any malicious activities...
lenovo_exec
lenovoexec CVE-2022-3699 with arbitrary kernel code execution capability original exploit: https://github.com/alfarom256/CVE-2022-3699...
CVE-2022-30190
CVE-2022-30190 IMPORTANT Patched as of: June 14th 2022 Security updates CVE Report HTML file must be served to target exaple exploit.html An easy way to run the attack is by running server.py...
Mass-exploit-CVE-2022-29464
Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...
CVE-2022-29622
CVE-2022–29622: Invulnerability Analysis This codebase was created to help security professionals and developers to understand why I think Formidable was not vulnerable to CVE-2022-29622. I have written up my analysis here: CVE-2022–29622: Invulnerability Analysis As some did not understand it, I...
Dirty-Pipe
CVE-2022-0847 Dirty Pipe Exploit Affected versions =5.8, 5.16.11, 5.15.25 and 5.10.102 exp.c Use this vulnerability to overwrite read-only files exp-root-shell.c Generate shellcode that executes /bin/sh to overwrite a SUID program owned by root, using passwd as an example. Then run the overwritte...
CVE-2022-46169
CVE-2022-46169 Fixed exploit for CVE-2022-46169 originally from https://www.exploit-db.com/exploits/51166...