144423 matches found
OFBiz-Attack
OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Test Environment vulhub/ofbiz:18.12.09 Usage Start java -jar OFBiz-Attack.jar There are three modules: Vulnerability Detection Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module exploitation...
frameworks_native_AOSP10_r33_CVE-2023-21118
This repository does not have a README...
Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028
Ghost Arbitrary File Read Exploit CVE-2023-40028 Overview This script exploits a vulnerability in Ghost CMS CVE-2023-40028 to read arbitrary files from the server. By leveraging a symlink in an uploaded ZIP file, an attacker can gain unauthorized access to sensitive files on the system. Features ...
Superset_auth_bypass_check
Supersetauthbypasscheck Apache-Superset authentication bypass vulnerability CVE-2023-27524 detection tool Fix date: 2023.8.3 Fixed session invalidation caused by hardcoded session expiry time, introduced flasksessioncookiemanager tool to generate real-time sessions for detection. Fixed the bug...
CVE-2023-38831
CVE-2023-38831 Exploit - Bait and Switch Archive Generator Overview This Python script is designed to generate a "bait and switch" archive file. It is meant for educational and ethical hacking purposes only. Please ensure that you have the necessary permissions before using this script. A "bait a...
CVE-2023-29017-reverse-shell
CVE-2023-29017-reverse-shell...
cve-2023-42115
CVE-2023-42115: Exploit and Payload Generator Scripts This repository contains two Python scripts: 1. exploit.py : A script for exploiting CVE-2023-42115. 2. generatepayload.py : A script for generating reverse shell payloads. Prerequisites Before running the scripts, ensure you have Python 3...
CVE-2023-40930
Introduction It's an introduction on how to set up CVE-2023-40930 Repetition Enviroment Learn more about this CVE problem in "issue detail.pdf" Set up general You can use rasperry pi zero 2W or any other ARM64ARM32 also arch devices to set up this enviroment,this can be also set up on Android...
CVE-2023-27997
This repository does not have a README...
CVE-2023-29923-Scan
CVE-2023-29923-Scan PowerJob =4.3.2 Unauthorized Access Vulnerability Detection Tool CVE-2023-29922...
acceleratortroll
AcceleratorTroll⢠Abusing CVE-2023-28206 to make something useful. Roadmap Right now, we are still trying to understand how the vulnerability works and how to exploit it for anything other than panics. Prove that the vulnerability can be used to obtain kernel privileges. Obtain a krw exploit. Run...
netgear-pwnagent
PwnAgent This is the PoC for CVE-2023-24749, aka PwnAgent, a One-Click WAN-side RCE in Netgear RAX Routers. You can trigget this exploit by visiting http://pwn.mahaloz.re. Explanation Please visit the blog which explains this here...
CVE-2023-2640-CVE-2023-32629
This repository does not have a README...
acropadetect
Acropadetect Web tool for detecting Acropalypse CVE-2023-21036...
CVE-2023-0386-libs
Install compilation environment sudo apt install -y gcc libfuse-dev pkg-config Compile exploit gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse Generate shellcode msfvenom -p linux/x86/exec CMD=/bin/sh PrependSetuid=True -f elf -o...
Open-Source-Seal-Security
SEAL SECURITY PROJECT : Open Source Engineer Task Create new version of package tough-cookie V2.5.0 ,for fix critical vulnerability CVE-2023-26136, project written in Node.js V20 Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of...
pulse-meter
Pulse Meter This is a work in progress for parsing the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282. Caveat : False positives are possible so it's best to check manually to verify any results. Note...
CVE-2023-27363
CVE-2023-27363...
CVE-2023-38646-PoC-Metabase
CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...