exploit-apache2-cve-2021-41773

Exploit for Apache2 Exploit for path transversal vulnerability in apache. Version: 2.4.49 CVE: CVE-2021-41773 Pull docker image docker pull httpd:2.4.49-alpine Configure apache In /usr/local/apache2/conf/httpd.conf replace these entries AllowOverride none - Require all denied + Require all denied...

Windows-exploitation-Apache-Tomcat-8.5.19-CVE-2019-0232-

This repository does not have a README...

CVE-2023-23752

Joomla! information disclosure - CVE-2023-23752 exploit Exploit for CVE-2023-23752 4.0.0 = Joomla = 4.2.7. Usage Before using the project we need to install the required packages I recommend creating a virtual environment first pip install -r requierements.txt Proof of Concept To create a...

CVE-2021-4034

CVE-2021-4034 self contained bash script, just run and pwn! with reference to Qualys' blog post https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

Joomla-v4.2.8---CVE-2023-23752

Joomla! v4.2.8 - Unauthenticated Information Disclosure Exploit Script This Bash script exploits an unauthenticated information disclosure vulnerability in Joomla! versions 4.0.0 to 4.2.8. sudo apt-get update sudo apt-get install jq ./exploit.sh http://example.com...

CVE-2024-26229-exploit

CVE-2024-26229 Windows LPE This repository is a rewrite of the code from here, but without additional dependencies. PATCHED: Apr 9, 2024...

cve-2020-0601-plugin

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110...

ipwndfu

Open-source jailbreaking tool for many iOS devices Readdisclaimer before using this software. checkm8 permanent unpatchable bootrom exploit for hundreds of millions of iOS devices meant for researchers, this is not a jailbreak with Cydia yet allows dumping SecureROM, decrypting keybags for iOS...

CVE-2026-8206

CVE-2026-8206 CVE-2026-8206 Kirki Plugin Unauthenticated Account Takeover Exploit...

Ducky-Exploit

Ducky-Exploit Introduction Ducky Exploit is python framework which helps as to code Digispark as Rubber Ducky This script has been tested on Kali Linux 18.2 Ubuntu 18.04 Windows Works with both Python2 and Python3 Keyboard Support Type US Type Keyboard Usage git clone...

CVE-2023-1767

Stored XSS snyk.io Discovery 19/03/23 CVE-2023-1767 Responsible Vulnerability Disclosure Report Vulnerability blog post coverage Exploit PoC...

CVE-2022-22963

CVE-2022-22963 spring cloud function spel rce spring cloud function one-click exploitation tool! by charis Blog https://charis3306.top/ Packaged as an exe file, ready to use out of the box Command theme usage: Spring-cloud-function-spel0.2.exe -h --check CHECK --route ROUTE --url URL --ip IP --po...

billing-hack

Billing Hack For information about this code, go to http://sufficientlysecure.org/index.php/2013/10/29/google-play-billing-hacked/...

Metinfo-6.1.2-SQL-injection

Metinfo-6.1.2-SQL-injection Metinfo 6.1.2 SQL injection script 0-sec.org...

CVE-2019-18818

CVE-2019-18818 Strapi = 3.0.0-beta exploit POC...

CVE-2020-9484

CVE-2020-9484 Click the image to watch the video Usage Make it execuateble chmod +x CVE-2020-9484 ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

cpiopwn

cpiopwn CVE-2021-38185 This is an ACE POC of an integer overflow bug in cpio. This exploit bypasses all binary protections except full RELRO. This exploit uses cpio 2.13 and libc 2.31. Video demo: https://youtu.be/F0yKJhu7Vak Running the exploit We've provided a Kali Dockerfile to run the exploit...

CVE-2019-5010

CVE-2019-5010 Author: Jonathan M. Wilbur Copyright Year: 2019 License: MIT License How to use 1. Install all dependencies by running npm install. 2. Compile the project using npm run build. 3. Run node ./dist/index.js to create the evil certificate in ./dist/cve-2019-5010-cert.pem. 4. Bring up th...

cve-2026-31431

CVE-2026-31431 This document describes a public Python exploit related to the CVE-2026-31431 vulnerability. The code demonstrates the exploitation of the flaw using primitives from the Linux AFALG subsystem, AEAD cryptographic operations, and memory manipulation via splice, with the goal of...

cve-2021-22146

cve-2021-22146 I found during a internal pentest a vulnerability on elastic ECE. Elasticdump is a PoC for CVE-2021-22146 to dump database from elastic ece from 7.10.0 to 7.13.3 https://www.exploit-db.com/exploits/50152 Collaborators: Mario Díaz Caldera...