58 matches found
Root-My-Galaxy
Root My Galaxy Root My Galaxy는 명시적으로 지원되는 Samsung 모델 및 커널 조합을 위한 원클릭 설치 프로그램입니다. 애플리케이션 자체는 기기 오프셋, 네이티브 익스플로잇 페이로드 및 KernelSU 빌드 아티팩트와 분리되어 유지됩니다. 최신 릴리스 기기 피드와 네이티브 페이로드는 Root-My-Galaxy-Payloads에서 관리됩니다. 애플리케이션 이 앱은 모델 목록과 세 부분으로 구성된 커널 버전이 휴대폰과 일치하는 페이로드를 선택합니다. 예를 들어, 6.6.98-android15-8-...는...
CVE-2025-55182-zoomeye
Zoomeye Next.js RCE 스캐너 작성자: im-ezboy Zoomeye 검색을 사용하는 Next.js RCECVE-2025-55182 스캐너입니다. Zoomeye 쿼리를 통해 대상을 찾고 제공된 익스플로잇 페이로드로 테스트합니다. 기능 기본적으로 두 가지 집중된 Zoomeye dork 사용: http.header="Vary: RSC, Next-Router-State-Tree" vul.cve="CVE-2025-55182" 요청 시간 초과 제어가 포함된 병렬 스캐닝기본 20개 스레드. 취약한 대상을...
CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow
CVE 2004-2271 MiniShare-1.4.1-Buffer-Overflow https://vulners.com/cve/CVE-2004-2271 Utilizzo nel file, genera automaticamente un payload msfvenom perché sono pigro. Importato da: https://www.exploit-db.com/exploits/636/...
CVE-2017-8759
CVE-2017-8759 PoC di weaponizzazione Questa repository contiene dati che possono essere utilizzati per armare la vulnerabilità CVE-2017-8759. Per informazioni complete visita https://www.mdsec.co.uk/blog/ per trovare il post relativo a questa vulnerabilità. Come sempre, la mia ricerca mira ad...
safer-eval-cve-CVE-2019-10760
safer-eval-cve-CVE-2019-10760 Il seguente exploit proof-of-concept POC che riguarda safer-eval versione 1.3.1 e precedenti è il primo payload pubblicamente noto ad attaccare questo intervallo di versioni. Contributi Consulta CONTRIBUTING per le linee guida su come contribuire a questo progetto...
Exploit for CVE-2026-42945
CVE-2026-42945 PoC Go This tool is designed for detecting a...
Exploit for CVE-2026-1731
CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC...
📄 Django 5.1.13 SQL Injection
Django version 5.1.13 suffers from a remote SQL injection vulnerability. Exploit Title: Django 5.1.13 - SQL Injection Google Dork: none Not applicable for this vulnerability Date: 2025-12-03 Exploit Author: Wafcontrol Security Team Vendor Homepage: https://www.djangoproject.com/ Software Link:...
Malicious code in syahlan-poke34 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca1810855f6ff0be7eedd9ab5f40bc1ca3b86429e31d927154d49bb36065d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Sitecore 10.4 - Remote Code Execution (RCE)
Exploit Title: Sitecore 10.4 - Remote Code Execution RCE Exploit Author: Yesith Alvarez Vendor Homepage: https://developers.sitecore.com/downloads Version: Sitecore 10.3 - 10.4 CVE : CVE-2025-27218 Link: https://github.com/yealvarez/CVE/blob/main/CVE-2025-27218/exploit.py from requests import...
Malicious code in zora-exploit-payload (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a09d84c94c165c768d88481e00efa77860f1237a66dc441e253dd480f1e476a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4959 Malicious code in zora-exploit-payload (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a09d84c94c165c768d88481e00efa77860f1237a66dc441e253dd480f1e476a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Hax CMS Stored Cross-Site Scripting vulnerability
Summary The application does not sufficiently sanitize user input, allowing for the execution of arbitrary JavaScript code. The 'saveNode' and 'saveManifest' endpoints take user input and store it in the JSON schema for the site. This content is then rendered in the generated HAX site. Although t...
Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)
Exploit Title: Ivanti Connect Secure 22.7R2.5 - Remote Code Execution RCE Date: 2025-01-11 Exploit Author: @absholi7ly CVE: CVE-2025-0282 import requests import sys import struct import socket import ssl import urllib3 import time Disable SSL warnings...
CVE-2025-21609 SiYuan has an arbitrary file deletion vulnerability
SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary file deletion vulnerability. The vulnerability exists in the POST /api/history/getDocHistoryContent endpoint. An attacker can craft a payload to exploit this vulnerability,...
CVE-2025-21609
CVE-2025-21609 affects SiYuan Note 3.1.18. The vulnerability exists in the POST /api/history/getDocHistoryContent endpoint, where an attacker can craft a payload to cause arbitrary file deletion on the server. The issue is addressed by commit d9887aeec1b27073bec66299a9a4181dc42969f3, with a fix e...
CVE-2025-21609 SiYuan has an arbitrary file deletion vulnerability
SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary file deletion vulnerability. The vulnerability exists in the POST /api/history/getDocHistoryContent endpoint. An attacker can craft a payload to exploit this vulnerability,...
Exploit for Out-of-bounds Write in Exim
CVE-2023-42115: Exploit and Payload Generator Scripts This r...
CE Phoenix 1.0.8.20 Remote Code Execution Exploit
Exploit Title: CE Phoenix v1.0.8.20 - Remote Code Execution RCE Authenticated Date: 2023-11-25 Exploit Author: tmrswrr Category: Webapps Vendor Homepage: CE Phoenix Version: v1.0.8.20 Tested on: Softaculous Demo - CE Phoenix EXPLOIT : import requests from bs4 import BeautifulSoup import sys impor...