939080 matches found
cve-2023-1671
Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack is a Perl script that calls /opt/ws/bin/sblistpack, which is another Perl script. The shell command arguments in it are enclosed in single quotes: $rc += system"$sblistpack '$uri' '$user'...
CVE-2021-1732-Exploit
CVE-2021-1732-Exploit CVE-2021-1732 Exploit Only tested on windows10 1909 x64...
CVE-2022-30190---Follina---Poc-Exploit
Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure to send the doc or rtf file t...
bowcaster
Bowcaster Exploit Development Framework This framework, implemented in Python, is intended to aid those developing exploits by providing useful set of tools and modules, such as payloads, encoders, connect-back servers, etc. Currently the framework is focused on the MIPS CPU architecture, but the...
cve-2021-21985_exp
cve-2021-21985 exploit 0x01 Vulnerability Point Analysis available at: https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=homerapid7-analysis 0x02 exploit Reconstruct the beans object to achieve RCE. Bean list: localizedMessageBundle vsanWorkerThreadFactory vsanThreadPoolImpl...
PRET
PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...
CVE-2024-26229-exploit
CVE-2024-26229 Windows LPE This repository is a rewrite of the code from here, but without additional dependencies. PATCHED: Apr 9, 2024...
Remot3d
Remot3d - An Easy Way To Exploiting Will be updated soon Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been obsfucated, which means that it shoudl generally be FUD Fully...
CSPBypass
CSP Bypass Welcome to CSPBypass.com , a tool designed to help ethical hackers bypass restrictive Content Security Policies CSP and exploit XSS Cross-Site Scripting vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains. Website Visit CSPBypass.co...
Threaded-CVE-2018-15473
CVE-2018-15473 — SSH Username Enumeration Tool A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching. Table of Contents About the Vulnerabilit...
SCMKit
SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...
A-Red-Teamer-diaries
A Red-Teamer diaries Publicly accessible notes about my pentesting/red teaming experiments tested on several controlled environments/infrastructures that involve playing with various tools and techniques used by penetration testers and redteamers during a security assessment. Project in progress...
CVE-2026-112210 Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the...
CVE-2026-112210 Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the...
CVE-2026-112210
A flaw exists in the rhc-canonical-facts.service systemd unit shipped with rhc . The service runs as root and processes a file within a directory owned by an unprivileged system user without verifying if the file is a symbolic link . A local attacker who has already compromised the privileged ygg...
EUVD-2026-104247
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the...
CVE-2026-112210
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the...
CVE-2020-10199-Nexus-3.21.01
CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Remote Code Execution Authenticated - Updated This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit https://www.exploit-db.com/exploits/49385 Change the user,password,URL and CMD...
Adiscon
Exploit Title: Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection. Date: 2023-06-20 Exploit Author: Pedro TW Category : Webapps Vendor Homepage: https://loganalyzer.adiscon.com/ Version: v4.1.13 and before Tested on: Linux CVE : CVE-2023-34600 Reference...