CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Backend - Dashboard in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

devarea

DevArea — HackTheBox Platform: HackTheBox OS: Linux Status: Retired — full walkthrough published. Full walkthrough: l3dsec.com/walkthroughs/devarea-htb Attack Chain root@kitploit: nmap → 21 FTP anon + 80 + 8080 Jetty + 8888 Hoverfly → FTP anon → employee-service.jar Apache CXF, pre-3.5.5 →...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

detect_bluekeep.py

detectbluekeep.py Python script to detect bluekeep vulnerability - CVE-2019-0708 - with TLS/SSL support Work derived from the Metasploit module written by @zerosum0x0 https://github.com/zerosum0x0/CVE-2019-0708 RC4 taken from https://github.com/DavidBuchanan314/rc4 Prerequisites detectbluekeep.py...

CVE-2024-46987

CVE-2024-46987: Automated Path Traversal 📖 Overview This repository contains a Python-based Proof of Concept PoC for CVE-2024-46987. This vulnerability is a Path Traversal flaw found in file download modules of certain CMS environments notably Camaleon CMS Version 2.9.0 The script automates the...

CVE-2024-51482

CVE-2024-51482 — ZoneMinder Time-Based Blind SQL Injection A proof-of-concept exploit for CVE-2024-51482 , an authenticated time-based blind SQL injection vulnerability in ZoneMinder v1.37. ≤ 1.37.64. The script extracts usernames and password hashes from the zm.Users table using binary search...

CIFSwitch-Checker-CVE-2026-46243

CIFSwitch Checker - CVE-2026-46243 Checker for Linux to identify configurations potentially vulnerable to the CIFSwitch vulnerability CVE-2026-46243. It does not exploit the vulnerability or modify the system. The main goal is to help identify potentially affected systems and validate mitigations...

attestos

attestos Experimental Linux boot-attestation image and evidence harness for testing what an anti-cheat vendor could verify instead of relying on a distribution-name allowlist. The mechanism, the threat model, and the vendor specification live in plunder707/attested-gaming. This repository is the...

docker_lightman_exploit

Docker Lightman Exploit Docker CVE-2022-37708. This exploit relies on how the UNIX filesystem has UID and GID on files that Docker shares between the Host running the Docker and the Client being run within the Docker as well as relies on the nature of how Process ID ownership works. The Problem i...

cve-2007-2447

CVE-2007-2447 Requisites pysmb Information The CVE-2007-2447 affects Samba from version 3.0.0 to 3.0.25rc3. It allows attackers to execute shell commands in the username parameter. Usage Open a listening port of your choice, set up the variables in the script and execute the script...

CVE-2023-30258-magnus-billing-v7-exploit

Magnus Billing System v7 Exploit This Python script automates the exploitation of a command injection vulnerability in Magnus Billing System v7, specifically in the icepay.php script located at /mbilling/lib/icepay/icepay.php. The exploit leverages the democ parameter to execute arbitrary command...

CVE-2023-38831

Place the bait file and evil script file in the current directory, the bait file is recommended to be an image .png, jpg or a document .pdf 2. Run python gen-CVE2023-38831.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar to generate your exploit...

CVE-2023-27350-POC

CVE-2023-27350-POC A python script tht searches for vulnerable version of PaperCut MF/NG More information can be found here: https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software Note: This was created for educational use only. Use at your own risk...

ROOT-ZTE-X1001

ZTE Blade X1001 — Root with Magisk Android 15, Unisoc UMS9230 ⚠️ WARNING: Rooting a device can void the warranty, brick the device if done incorrectly, and erase all data. Proceed at your own risk. This repository is for educational purposes only. Table of Contents Device information Prerequisites...

GarbageMan

GarbageMan What is GarbageMan? GarbageMan is a set of tools designed for .NET heap analysis. These tools offer the following benefits for malware researchers: Ability to extract clear-text payload PE Images etc. from .NET heaps quickly. Easy analysis of encrypted network protocols, signs of data...

MDE-AuditCheck

MDE-AuditCheck Makes sure all audit settings MDE relies on are properly set in the GPO The script relies on the Remote Server Administration Tools RSAT...

CVE-2024-32444

CVE-2024-32444 As of 24/01/25 this vulnerabiltiy does not have a patch hence this is simply a product detection template as all products associated with the RealHome wordpress theme are vulnerable. The theme allows users to register new accounts via the inspiryajaxregister function, however, it...

vuln-list-backup

vuln-list Collect vulnerability information and save it in parsable format automatically Source Directory| OS| Source| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1|...

PoC-CVE-2018-15473

PoC-CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. CVE: CVE-2018-1547...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Jellyfin arbitrary file read Wker script, batchable. The logic is very simple, it checks for the existence of win.ini via GET: root@kitploit: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ define info = CVE-2021-21402...