CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - RCE Remote Code Execution Vulnerability in Out-of-Date Versions of Confluence Data Center and Server Advisory Release Date Tue, Jan 16 2024 01:00 EST Products: Confluence Data Center Confluence Server Affected Versions: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x 8.5.0-8.5.3...

SCANNER-INURLBR

Desription Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. A PHP tool that can run on different Linux distributions helps hackers and security professionals with...

tapodate

tapodate Uses https://github.com/hacefresko/CVE-2021-4045 exploit to set the date and other commands to an offline Tapo C200...

CVE-2025-29927

Advanced CVE-2025-29927 Vulnerability Scanner This is a professional-grade scanner designed to detect the CVE-2025-29927 middleware bypass vulnerability in Next.js applications. 🧠 What It Does Uses a real headless browser Playwright to deeply crawl a target website JS-rendered content included...

cve-2024-0012-gui-poc

CVE-2024-0012 and CVE-2024-9474 Authentication Bypass in the Management Web Interface PAN-SA-2024-0015 and Authenticated Command Injection in Palo Alto PAN-OS. See the blog post for technical details. Exploit authors Original exploit written by Sonny of watchTowr @watchtowrcyber. Code and GUI...

CVE-2023-29983

Exploit Title: Stored Cross Site Scripting Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29983 Description: The vulnerability...

DetectPacket-CVE-2017-8464

Building a Vulnerability Detection Application for CVE-2017-8464 Source click here CONTENTS: PART 1: OVERVIEW OF CVE-2017-8464 1. CONCEPT OF LNK FILE 2. CREATING A SYSTEM VULNERABLE TO CVE-2017-8464 3. TOOLS FOR EXPLOITING CVE-2017-8464 PART 2: USING METASPLOIT TO EXPLOIT CVE-2017-8464 2.1...

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 libssh authentication bypass, a vulnerable Docker container that listens on port 2222 for exploitation. A basic proof-of-concept libssh patch included in the container to bypass auth. To login use the default "myuser" / "mypassword" from libssh. A patch is applied to...

CVE-2024-31835

CVE-2024-31835 Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a craftedpayload to the file name parameter. Affected Component: FlatPress CMS Admin Panel File Upload Field Fixed version: Flatpress v1.3 - will be fixed in...

Nginx-CVE-2013-4547

Nginx Filename Logic Vulnerability CVE-2013-4547 Vulnerability Description Affected versions: Nginx 0.8.41 1.4.3 / 1.5.0 1.5.7 Reference links: https://vulners.com/cve/CVE-2013-4547 https://blog.werner.wiki/file-resolution-vulnerability-nginx/ http://www.91ri.org/9064.html Vulnerability Descripti...

kali-vm

Kali-VM Build-Script Kali Linux Virtual Machine VM image builder, viadebos with fakemachine and KVM. These are the same build-scripts that the Kali team uses to generate the official Kali Linux VM images, found on kali.org/get-kali/. For more information, please see: kali.org/docs/virtualization/...

log4py

log4py pythonic pure python RCE exploit for CVE-2021-44228 log4shell 1. run a vulnerable service like https://github.com/zzzz0317/log4j2-vulnerable-spring-app 2. change settings in exploit.py 3. pwn This is for educational use only mostly for my own lol This might only be useful after some...

cnext-exploits

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer overflow in the glibc's iconv, by @cfreal Usage $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt Technical analysis The vulnerability and exploits are described in the...

CVE-2022-0847-dirty-pipe-exploit

CVE-2022-0847-dirty-pipe-exploit An exploit for CVE-2022-0847 dirty-pipe vulnerability How to use this Compile with gcc exploit.c -o exploit assumes gcc is installed Run ./exploit and it'll pop a root shell If you are getting error message like then, Login as root with password cspshivam Then,...

CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: andy website: https://blog.csdn.net/koozxcv how to build Import the project into eclipse,and build. bug info http://seclists.org/fulldisclosure/2014/Nov/51 analysis...

laravel-exploits

laravel-exploits Exploit for CVE-2021-3129 Details: https://www.ambionics.io/blog/laravel-debug-rce Usage $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar Log file:...

CVE-2022-0847_DirtyPipeExploit

What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of concept. This exploit is merely...

htattack

htattack.py An exploit implementation for RCE in RTF docs CVE-2017-0199. Video in Spanish: https://www.youtube.com/watch?v=0lDvclMrymM Usage: python htattack.py -u...

CVE-2019-7214

CVE-2019-7214 Remote Code Execution in .NET deserialization for the SmarterMail system. Collection Please find a collection of proof of concepts for the exploit in this repository. Some may work as intended without modification and some may require modification...

CVE-2021-22005

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...