1323228 matches found
CVE-2021-22005
This repository does not have a README...
wp2shell-scanner
wp2shell-scanner Detection and validation tooling for WordPress core exposure to wp2shell CVE-2026-63030 / CVE-2026-60137. Modes are selected with a flag, and the target is positional. --scan fingerprints the core version and confirms the REST /batch/v1 route is reachable without sending an explo...
Log4Shell-demo
Log4Shell in action This project aims to demonstrate how the Log4Shell / CVE-2021-44228 vulnerability works. Requirements You only need to have Docker installed. Ideally you have two different virtual machines. One for the vulnerable server and one for the malicious server that will host the...
Embedded-Backdoor-Connection
Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...
parquet-canary-exploit-rce-poc-CVE-2025-30065
Canary Exploit for Parquet CVE-2025-30065 -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / \ . / \ . / -. |...
nginx-mitigate-log4shell
nginx-mitigate-log4shell Mitigate log4shell CVE-2021-44228 and CVE-2021-45046 vulnerability attacks using Nginx LUA script Requires the Nginx lua module https://www.nginx.com/resources/wiki/modules/lua/ to be enabled. Use include /path/to/mitigate-log4shell.conf; in the server ... context. Can be...
Apache-Struts-0Day-Exploit
Apache-Struts-0Day-Exploit Critical Remote Code Execution Vulnerability CVE-2018-11776 Found in Apache Struts. Installation git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ Usage: python ApacheStruts.py URL : www.example.com/ Shell : "Commands" i.e ls, dir, whoami...
Rails-doubletap-RCE
Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...
CVE-2021-26855-SSRF-Exchange
CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...
DahuaLoginBypass
DahuaLoginBypass Chrome extension that uses vulnerability CVE-2021-33044 to log in to Dahua IP cameras and VTH/VTO video intercom devices without authentication. For other device types NVR/DVR/XVR, etc, there exists CVE-2021-33045 which cannot be exploited with an ordinary web browser. These...
Groovy-scripting-engine-CVE-2015-1427
ElasticSearch Groovy Sandbox Bypass && Code Execution Vulnerability CVE-2015-1427 Test Environment jre version: openjdk:8-jre elasticsearch version: v1.4.2 Principle Reference articles: http://cb.drops.wiki/drops/papers-5107.html...
test_cve-2023-46747
Python script to test if a F5 BIG-IP is vulnerable for CVE-2023-46747. When vulnerable a user account with administrator rights is added. To mitigate this vulnerability, see: https://my.f5.com/manage/s/article/K000137353...
CVE-2022-39197-fix_patch
CVE-2022-39197-fixpatch Usage Add parameters when starting cobaltstrike -javaagent:fixXss-1.0-SNAPSHOT.jar...
CVE-2021-33766
POC Exploit CVE-2021-33766 ProxyToken POC Exploit for CVE-2021-33766 ProxyToken is a handy shell script which provides pentesters and security researchers a quick and effective way to test Microsoft Exchange ProxyToken vulnerability. Disclaimer This program is for Educational purpose ONLY. Do not...
ble_norton_core
PoC command injection in BLE service of Norton Core Secure WiFi Router CVE-2018-5234 For more information read paper. To demonstrate the exploitation, we will use: OS GNU/Linux; Bluetooth dongle adapter; BlueZ utility for testing Bluetooth connection. In order to use the script, we will need to s...
CVE-2019-0708-EXP-Windows
CVE-2019-0708-EXP-Windows-Version Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activities, the author is not responsible. Table of Contents toc Introduction CVE-2019-0708-EXP-Windows version runs as a single executable file, no need for Linux, Pytho...
CVE-2024-44625
CVE-2024-44625...
Exploit-For-CVE-2022-36067
Exploit-For-CVE-2022-36067 This repo contains payload for the CVE-2022-36067 How to exploit? Paste the payload given in payload.js along with the command you want to run. Test on local machine. To test on local machine, git clone the repo, install the dependecies and run app.js using node. If the...