CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...

Kamerka-GUI

Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...

PEASS-ng

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...

CVE-2021-27850_POC

CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...

ipeeyoupeewepee

ipeeyoupeewepee A scanner and attack suite for hosts on the public internet mostly Cisco routers that forward unauthenticated packets encapsulated in the IP-in-IP and GRE protocols. This vulnerability, known as "Insecure Implementation of Tunneling Protocols," is tracked under CVE-2020-10136 and...

CVE-2024-39211

CVE-2024-39211 Kaiten User Enumeration Kaiten - a workflow management system, is vulnerable to unrestricted brute force attacks on user logins and email addresses registered in the system via a simple POST request. References: CVE MITRE Description NVD CVE Usage Simple download bash script and ru...

CVE-2022-40684

CVE-2022-40684 Individual or batch exploit for CVE-2022-40684 How to use Generate public key python3 exp.py -u ip:port -k idrsa2048.pub -l hosts.txt for batch processing with a file FOFA title="FortiGate"...

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...

CVE-2026-111868

A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/PulsarObjectMessage.java. This manipulation causes deserialization. It is possible to initiate the attack remotely. T...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

CVE-2024-36991

Splunk Path Traversal Exploit CVE-2024-36991 Description This is a Proof-of-Concept PoC exploit script for CVE-2024-36991 , a path traversal vulnerability affecting Splunk Enterprise on Windows versions below: 9.2.2 9.1.5 9.0.10 The vulnerability allows unauthenticated attackers to access sensiti...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection Install requirements pip3 install -r requirements.txt Run exploit USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py https://target.com 'ls -la'...

CVE-2021-31166

CVE-2021-31166 simple bash script for exploit CVE-2021-31166...

Exploit-Medium-CVE-2021-41184

Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 XSS in the of option of the .position util 1. jQuery ui version v1.12.1 vulnerable 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js ------------------------------------------------Concept...

CVE-2023-22518

CVE-2023-22518 Checker for CVE-2023-22518 and CVE-2023-22515 critical vulnerabilities in Confluence. Description This script is designed to check for and exploit vulnerabilities in Atlassian Confluence instances. It checks for the vulnerability CVE-2023-22518, and exploits the vulnerability...

CVE-2022-22947_EXP

1. Spring Cloud Gateway Remote Code Execution Vulnerability Hazard Level: High POC/EXP: Public CNVD ID: CNNVD-2022-16402 CVE ID: CVE-2022-22947 2. Affected Versions: VMWare Spring Cloud GateWay 3.1.0 VMWare Spring Cloud GateWay =3.0.0, python cve-2022-22947.py 验证单个目标： 1、python cve-2022-22947.py...

msdt-disable

NOTE : This tool is now obsolete! The Follina exploit is now fixed as of June 14, 2022. Which means: if you used this tool, you can now enable the MSDT protocol again... if you still have the backup .reg file, of course. The MSDT Protocol Disabler is a tool that disables the MSDT protocol...

CVE-2014-0472

CVE-2014-0472 Use docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect upon successful...

F5-BigIP-CVE-2022-1388

F5-BigIP-CVE-2022-1388 Reverse Shell for CVE-2022-1388 Download and Usage git clone https://github.com/qusaialhaddad/F5-BigIP-CVE-2022-1388.git cd F5-BigIP-CVE-2022-1388 chmod +x Exploit-F5-BigIP-CVE-2022-1388.py python3 Exploit-F5-BigIP-CVE-2022-1388.py -t BigIP-IPAddress:Port -c "tmsh show sys...