840411 matches found
CVE-2025-41646
CVE-2025-41646 - Bypass de Autenticación en RevPi Webstatus = 2.4.5 Exploit Resumen Este es un script de exploit en Python3 para CVE-2025-41646 , una vulnerabilidad de Bypass de Autenticación que afecta a RevPi Webstatus = 2.4.5. Detalles de la Vulnerabilidad: CVE ID : CVE-2025-41646 Producto...
CVE-2024-25600
Bricks Builder RCE Exploit CVE-2024-25600 This project contains a Python-based exploit script targeting the Bricks Builder WordPress plugin Remote Code Execution RCE vulnerability identified as CVE-2024-25600. The exploit allows unauthorized remote command execution by injecting PHP code via a...
CVE-2024-1212
CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...
CVE-2020-7247
CVE-2020-7247 Proof Of Concept Exploit for CVE-2020-7247 Remote Execution on OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 tested on: OpenBSD 6.6 credits to Marco Ivaldi [email protected] for payload Usage remote $ go run CVE-2020-7247.go -u 192.168.0.2 -p 25 -...
CVE-2019-8449
CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...
CVE-2018-7600
CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...
CVE-2023-5044
CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation Firstly, you need deploy Pod & Service: root@kitploit: kind: Pod apiVersion: v1 metadata: name: apple-app labels: app: apple spec: containers: - name: apple-app image: hashicorp/http-echo args: -...
victorian_machinery
Victorian Machinery Victorian Machinery is a proof of concept exploit for CVE-2022-30525. The vulnerability is an unauthenticated and remote command injection vulnerability affecting Zyxel firewall's that support zero touch provisioning. Zyxel pushed a fix for this issue on April 28, 2022. The...
CVE-2018-12596
CVE-2018-12596 Ektron CMS 9.20 SP2 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden normally available exclusively for local admins. Exploit-DB publication at...
CVE-2024-10915
CVE-2024-10915 - D-Link NAS Command Injection Exploit This Python-based exploit targets a command injection vulnerability in several D-Link NAS products via the /cgi-bin/accountmgr.cgi?cmd=cgiuseradd endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary system commands...
CVE-2025-31161
CVE-2025-31161 - CrushFTP Authentication Bypass Exploit This Python script exploits CVE-2025-31161, an authentication bypass vulnerability in CrushFTP, allowing unauthenticated attackers to retrieve the user list from the getUserList API endpoint. Features Authentication bypass via CrushAuth and...
http-vuln-CVE-2019-16759
SUMMARY Simple NSE script to detect vBulletin 5.x 0day pre-auth RCE. This should work on all versions from 5.0.0 till 5.5.4 INSTALLATION $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp http-vuln-CVE-2019-16759.nse /usr/share/nmap/scripts/...
CVE-2025-13597
AI Feeds = 1.0.11 - Carga de archivos arbitraria sin autenticación El complemento de WordPress AI Feeds en versiones 1.0.11 e inferiores contiene una vulnerabilidad de ejecución remota de código sin autenticación en el archivo actualizadorgit.php. Este archivo es accesible directamente vía HTTP s...
CVE-2023-22809
CVE-2023-22809 Youtube PoC: https://m.youtube.com/watch?v=b0UV7WgtKyI This repository contains the exploit to exploit CVE-2023-22809. The exploitation depends on allowing the sudo users to execute sudoedit under sudo -l. More details in the OpenWall mailing list. About This is done as part of a...
CVE-2020-27955
CVE-2020-27955 Thanks https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...
Detect-CVE-2017-0144-attack
Python Program to Detect CVE-2017-0144 Attack Python program tasked with continuously monitoring network traffic in real-time. It will alert on the console when it detects a CVE-2017-0144 EternalBlue attack 1. Lab Model This lab is performed on 3 virtual machines in VMWare. 1 attacker machine Kal...
CVE-2022-4262
CVE-2022-4262 Full Analysis including root cause, PoC and exploit of CVE-2022-4262...
dmz-security-monitoring-hardening
DMZ Security Monitoring and Hardening CY376: Network Monitoring, Security and Auditing — End-of-Semester Project Blue Team | University of Mines and Technology, Tarkwa Author: Kennedy Kumi Holomah Index number: FCM.41.018.148.23 Student ID: 9013004623 Overview This project builds, secures, and...
CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover-
8. CVE-2026-3456 – OAuth2 PKCE Race Condition Account Takeover Overview A race condition in the OAuth2 authorization server allows an attacker to reuse a victim’s authorization code before the legitimate client redeems it, by guessing or brute‑forcing the PKCE codeverifier within a small time...