1306199 matches found
SpEL
SpEL Batch detection tool for Spring Cloud Gateway Actuator API SpEL expression injection command execution CVE-2022-22947 Usage Write the URLs to be tested line by line in a file. Use parameter -TF to specify the file, and -t for concurrency count. Execution Result Yutu Security is committed to...
CVE-2018-8208
This repository does not have a README...
CVE-2017-0100
This repository does not have a README...
CVE-2024-5932
This post is a research article published by EQSTLab. ❗❗ IMPORTANT ❗❗ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...
ROOT-APP-NPM-CVE-2020-7774 CVE-2020-7774 in y18n - Patched by Root
Root has patched CVE-2020-7774 in the y18n package for Root:npm. Multiple fixed versions available...
Dirty-Pipe-CVE-2022-0847-POCs
Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...
Zimbra
Active Exploitation of Zimbra CVE-2022-37042 RCE Unauthenticated The following research began by trying to understand the POCs from several GitHub repositories shared by many researchers and ended in an interesting surprise, which I will share in the following paragraphs. On August 10 of this yea...
CVE-2021-31728
CVE-2021-31727 and CVE-2021-31728 Public Reference for CVE-2021-31727 Exposes unrestricted disk read/write capabilities. Public Reference for CVE-2021-31728 Exposes arbitrary ring 0 code execution directly. Credit Lima X helped with SystemBigPoolInformation idea...
CVE-2024-21413
Exploitation of CVE-2024-21413 Outlook Project status: On hold incomplete practice; failed to capture NTLM hashes Objectives Attempt to exploit vulnerability CVE-2024-21413, which allows leakage of NTLM hashes in Outlook when interacting with malicious links. The goal of the practice was not to...
openssh_dos
Since OpenSSH servers don't restrict the login password length, you can cause these servers to crash by sending very long passwords which use massive amounts of a the server's CPU to hash. This vulnerability is known as CVE-2016-6515. My POC can be downloaded here you will need to unzip Usage:...
CVE-2021-4034-touch
CVE-2021-4034-touch touch creates file...
Ticketbleed
Ticketbleed This tool is for exploiting Ticketbleed CVE-2016-9244 vulnerability, the Ticketbleed library inside src folder is a modified version of go's crypto/tls, it has few changes inside handshakeclient.go, tls.go, common.go files but it is almost same. BUILD root@kitploit: cd Ticketbleed mv...
CVE-2014-4322_adaptation
CVE-2014-4322adaptation Just an attempt to adapt for Note 4, I do not know what I am doing. There is currently a way to write to system using ADB CVE-2014-7951 and CVE-2014-7953. zxz0O0 has confirmed writing to system works. What we needed was to gain System UID to execute CVE-2014-4322. I am...
CVE-2024-40348
CVE-2024-40348 POC for CVE-2024-40348 Bazaar v1.4.3 and prior. Will attempt to read /etc/passwd from target. Overview This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovere...
CVE-2024-6387-Vulnerability-Checker
CVE-2024-6387 Vulnerability Checker Overview This Python script is designed to check SSH servers for the CVE-2024-6387 vulnerability, specifically targeting the recently discovered regreSSHion , which is associated with specific versions of OpenSSH. The tool supports multiple IP addresses, URLs,...
CVE-2019-0708poc
CVE-2019-0708poc Just constructed a batch detection script based on the single-IP detection tool for CVE-2019-0708 developed by 360Vulcan Team Only a single-threaded version was written.. haven't had time to implement multi-threading yet...
EvilRip
Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...
ActiveMQ_CVE-2015-5254
ActiveMQ Deserialization CVE-2015-5254 Vulnerability Description: Security vulnerabilities exist in Apache ActiveMQ versions before 5.13.0. The issue stems from the program not restricting the classes that can be serialized in the broker. Remote attackers can exploit this by sending a specially...