CVE-2022-46169

CVE-2022-46169 POC This is a Proof of Concept POC script for the CVE-2022-46169 vulnerability that affects Cacti version 1.2.22. Description The CVE-2022-46169 vulnerability allows an unauthenticated command injection in Cacti versions through 1.2.22 in order to achieve unauthenticated remote cod...

CVE-2020-0668

CVE-2020-0668 Make CVE-2020-0668 exploit work for version = win10 v1903 Diaghub Exploit evil.dll STEP 2：execute exp.ps1 with powershell STEP 3：execute Diaghub.exe C:\ProgramData evil.dll to load dll and add user. Diaghub UsoDllLoader Exploit = v1903 powershell exploit works on version = win10 v19...

TrustworthyRAG

Trustworthy RAG An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Retrieval-Augmented Generation Systems. Overview This project implements a Trustworthy RAG Framework with an integrated Evaluation Agent that assesses the reliability of RAG responses using three...

CVE-2026-5817-PoC

CVE-2026-5817: Docker Model Runner container-to-host RCE / Escape Any container on a Docker Desktop 4.40.0 to 4.67.x host can run code on the host with two HTTP requests. No socket mount, no --privileged, no caps. How Every container can reach Model Runner at model-runner.docker.internal with no...

CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Subscriber + Arbitrary Plugin Installation Description A lack of capability checks and insufficient nonce check on the AJAX action in the plugin, made it possible for authenticated users to install arbitrary plugins on vulnerabl...

CVE-2023-43208-PoC

Mirth Connect RCE Exploit CVE-2023-43208 This script is a Proof of Concept PoC for the Remote Code Execution RCE vulnerability in Mirth Connect versions prior to 4.4.1. It exploits an XStream deserialization vulnerability through the API. Requirements Python 3.10 or higher Compatible with 3.13...

CVE-2021-33564

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument Injection in Dragonfly Ruby Gem. Usage Arbitrary File Read python3 poc.py -u https:///system/refinery/images -r /etc/passwd Arbitrary File Write python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:...

struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 XML Deserialization RCE This repository demonstrates exploitation of Apache Struts S2-052 CVE-2017-9805 using malicious XML deserialization. The exploit was developed while solving the INE eWPTX Practice Range – Struts XML Deserialization RCE lab. Vulnerability Overview Apach...

log4shell-tools

log4shell.tools log4shell.tools is a tool that allows you to run a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046. This is the code that runs https://log4shell.alexbakker.me. If you'd like to inspect the code or...

CC_Watermark

Optimal Couplings for Distortion-Free Text Watermarking The official code of Optimal Couplings for Distortion-Free Text Watermarking Abstract Large-language models LLMs are now able to produce text that is indistinguishable from human-generated content. This has fueled the development of watermar...

CVE-2024-9707

CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the...

autowpscan

autowpscan An automated tool that automatically scanning a list of multiple websites with wordpress at once. and send scan summary to telegram with wpscan logs. Requires wpscan, Telegram BOT Token, WordPress Vulnerability Database API token Introduction This tool takes a list of multiple websites...

CloudMiner

CloudMiner Execute code within Azure Automation service without getting charged Description CloudMiner is a tool designed to get free computing power within Azure Automation service. The tool utilizes the upload module/package flow to execute code which is totally free to use. This tool is intend...

RedArrow

RedArrow3.2 - ThinkPHP 5.0.23 Remote Command Execution Tool User Guide 1. Tool Introduction RedArrow3.2 is a graphical tool for the ThinkPHP 5.0.23 remote command execution vulnerability, providing two main functions: single command execution and an interactive GodzillaShell-like interface. This...

CVE-2020-1066-EXP

Reference This vulnerability belongs to the Windows CardSpace service that does not properly handle symbolic link objects, leading to a local privilege escalation via arbitrary file replacement. Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activitie...

PoshBot

PoshBot Supporting PoshBot PoshBot is a MIT-licensed open source project. Ongoing development is made possible thanks to the support of sponsors. If you'd like to become a sponsor, you can do so through GitHub Sponsors or Patreon. Silver Sponsors Want some in-depth guides? Check out ChatOps the...

CVE-2024-23897-Vulnerabilidad-Jenkins

Exploitation of Vulnerability CVE-2024-23897 in Jenkins Vulnerability Description: CVE-2024-23897 CVE-2024-23897 is a critical vulnerability discovered in Jenkins, a popular continuous integration tool. This vulnerability allows remote command execution RCE on the Jenkins server due to a lack of...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

MoodleExploit

Moodle Exploit Exploit Title: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/archive/v3.4.1.zip Version: 3.4.1 Possibly 3.5.0 and maybe even...

CVE-2024-46987

CVE-2024-46987 - Camaleon CMS Local File Inclusion Authenticated Local File Inclusion LFI exploit for Camaleon CMS. Vulnerability Camaleon CMS is vulnerable to an authenticated LFI attack through the /admin/media/downloadprivatefile endpoint. The file parameter is not properly sanitized, allowing...