INPGer

INPGer | CVE-2022-4063 - InPost Gallery Automatic Mass Tool for checking vulnerability in CVE-2022-4063 - InPost Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use bash inpger.sh yourlist.txt thread Reference...

CVE-2022-1388

CVE-2022-1388 Nuclei Template for CVE-2022-1388. I have used the shadow file for poc , you can use the passwd '/etc/passwd' file as well. Change the Extractor according to your choice. POC Reference: https://support.f5.com/csp/article/K23605346...

dotnetpaddingoracle

dotnetpaddingoracle Small script to check if the .NET web application is vulnerable to padding Oracle This script actually verify if the oracle is present and exploitable, not just if the patch has been installed. usage dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp request file Perform...

CVE-2017-16524

CVE-2017-16524 Discovered by Omar Mezrag - 0xFFFFFF Affected Product Samsung Network Video Recorders - Web Viewer 1.0.0.193 on Samsung SRN-1670D Vendor of Product Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Vulnerability type Unrestricted file upload vulnerability Attack Vector...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR related to CVE-2020-1048 Details Author: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC date: 2010-xx-xx Release date: 2020-05-14 reminded/inspired by CVE-2020-1048 - yes, I am too...

CVE-2019-12744

CVE-2019-12744 Information Exploit Title: Remote Command Execution through Unvalidated File Upload in SeedDMS versions 5.1.11 CVE: CVE-2019-12744 Vendor Homepage: https://www.seeddms.org/index.php?id=2 Exploit Author: NobodyAtall Tested version: Seeddms 5.1.10, 5.0.11 Tested OS: Windows 7 x64...

CVE-2006-3392

CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequence...

CVE-2024-1561

CVE-2024-1561 PoC Script This is a Proof of Concept PoC script for CVE-2024-1561. Check the full writeup for the CVE here: https://huntr.com/bounties/4acf584e-2fe8-490e-878d-2d9bf2698338 Affected Version: Gradio 4.12.0 This was fixed in this PR https://github.com/gradio-app/gradio/pull/6884 and w...

CVE-2018-0296

Exploit-CVE-2018-0296 Python exploit for the recent Cisco ASA Path Traversal Vulnerability. This exploit will try to return the files from the index. Usage $ git clone https://github.com/bhenner1/CVE-2018-0296.git $ cd CVE-2018-0296 $ python CVE-2018-0296.py $ Vulnerable URL/IP -...

CVE-2025-5394

CVE-2025-5394 – WordPress Alone Theme = 7.8.3 - Unauthenticated Arbitrary File Upload via Plugin Installation 🔥 Vulnerability Summary The WordPress theme Alone versions = 7.8.3 is vulnerable to an unauthenticated arbitrary file upload vulnerability. This flaw allows unauthenticated attackers to...

follina_cve_2022-30190

follinacve2022-30190 A proof of concept to CVE-2022-30190 follina. usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host HOSTIP host ip address ...

CVE-2024-34313

CVE-2024-34313 Description VPL Jail System up to v4.0.2 was discovered to contain a Path Traversal vulnerability allowing arbitrary file overrides and thereby privilege escalation to root user. This vulnerability can be chained with CVE-2024-34312 to take over a Moodle instance remotely without a...

wso2-rce-cve-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which which allows unauthenticated attackers to gain RCE on WSO2 servers via uploading...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder = 1.7.5 - Unauthenticated Arbitrary File Download Usage python CVE-2024-9935.py http://example.com...

CVE-2023-5360

CVE-2023-5360 An Open-source EXPLOIT for The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Table of Contents Introduction Features Usage...

CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...

CVE-2023-26469

CVE-2023-26469 REC PoC This repository contains an exploit script for CVE-2023-26469, which allows an attacker to leverage path traversal to access files and execute code on a server running Jorani 1.0.0. Additionally, the script includes shell upload functionality for further exploitation...

CVE-2025-31324

CVE-2025-31324 A proof of concept developed to exploit CVE-2025-31324. Usage usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this help message and...

CVE-2026-112059

libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. Attackers can craft a .las file with a LASSchema variable length record whose schema exceeds 65535 bytes, so tools...

CVE-2017-5638-PoC

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repository contains a Proof of Concept PoC script demonstrating the Remote Code Execution RCE vulnerability identified as CVE-2017-5638 in Apache Struts 2. Vulnerability Details CVE ID: CVE-2017-5638 Affected Software: Apache Struts 2 versio...