CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

Grafana-CVE-2021-43798Exp

Grafana V8. Arbitrary File Read Exp -- Multi-threaded Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is often used as a visualization tool for time series data and application analysis of infrastructure, and is also widel...

CVE-2022-22965

Análisis de CVE-2022-22965 Spring4Shell Descripción de la vulnerabilidad Spring4Shell es el nombre de un CVE que existe en Spring Core del Spring Framework. Con una puntuación CVSS 3.x de 9.8, la vulnerabilidad está clasificada en el nivel de riesgo más alto crítico. Esta vulnerabilidad permite a...

hashdeep

This is md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure. It can also take a list of known hashes and display the filenames of input files whose hashes either do or do not mat...

CVE-2024-4040

CVE-2024-4040 - exploit scanners This repository contains files related to CVE-2024-4040 CrushFTP VFS escape. scanhost.py This script attempts to use the vulnerability to read files outside the sandbox. If it succeeds, the script writes Vulnerable to standard output and returns with exit code 1. ...

CVE-2026-94278

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

CVE-2026-48962

Summary An eval injection vulnerability in File::GlobMapper::getFiles allows any attacker who can control the output fileglob argument passed to IO::Compress::Gzip::gzip, IO::Compress::Zip::zip, or any sibling function to execute arbitrary Perl code in the context of the running process. No...

vuln-chm-hijack

PuTTY vulnerability vuln-chm-hijack Potential malicious code execution via CHM hijacking About Up to and including version 0.70, when you launched the online help in any of the Windows PuTTY GUI tools, the tool would locate its help file by looking alongside its own executable. If you were runnin...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

CVE-2024-43044-POC

Usage Download the JAR package via http://ip:port/jnlpJars/agent.jar Modify the corresponding code in \hudson\remoting\RemoteClassLoader.class Recompile and repackage Need to know the node's secret and name in advance java -jar agent.jar -url http://ip:port/ -secret -name Add the following conten...

Koh

Koh Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, s...

cve-2020-5902

cve-2020-5902 cve-2020-5902 POC exploit POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specify the loca...

miteru

This repository does not have a README...

Inspector

Ayudante de escalada de privilegios unix RESUMEN Inspector es un script de Python para ayudar en la escalada de privilegios en entornos Linux. Tras su inicio, este script busca la versión del kernel y verifica si existe un exploit, carga el historial de archivos bash, zsh, mysql... y carga la lis...

CVE-2024-36991

CVE-2024-36991 POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file. Overview This is a bulk scanning and exploitation tool for CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. This vulnerability was...

CVE-2024-24809-Proof-of-concept

CVE-2024-24809 Detail Description Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by...

net-creds

Olfa completamente contraseñas y hashes desde una interfaz o archivo pcap. Concatena paquetes fragmentados y no depende de los puertos para la identificación de servicios. Capturas de pantalla --- Olfatea URLs visitadas Cargas POST enviadas Inicios de sesión/contraseñas de formularios HTTP Inicio...

nushell

Nushell Un nuevo tipo de shell. Tabla de contenidos Estado Aprender sobre Nu Instalación Configuración Filosofía Pipelines Abrir archivos Plugins Objetivos Con soporte oficial de Contribuir Licencia Estado Este proyecto ha alcanzado un nivel de calidad de producto mínimamente viable. Muchas...

Dirty-Pipe-CVE-2022-0847-POCs

Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...

TomcatScanPro

TomcatScanPro README Version: 简体中文 Introduction This project is a weak password detection tool for Tomcat services. It supports multiple exploitation methods for CVE-2017-12615 vulnerability and integrates CNVD-2020-10487 Tomcat AJP protocol local file inclusion vulnerability exploitation...