nextjs-vulnerable-app

Next.js Authentication App This is a Next.js application that implements authentication using NextAuth.js. The app features protected routes that require users to be authenticated to access certain pages. Project Structure nextjs-auth-app ├── components │ ├── Layout.js Layout component for...

CVE-2020-5398

CVE-2020-5398 - RFDReflected File Download Attack for Spring MVC In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header...

CVE-2022-21587-Oracle-EBS-

Prerequirement for this exploit to run: python3 including module requests, os, sys, slipit uuencode Before you run, make sure to use for only on ethical duties if the exploit Fail to run: Make sure you already install the pre req module install requests pip3 install requests Install slipit, git...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the...

CVE-2023-38836

CVE-2023-38836 Exploit File Upload vulnerability in BoidCMS v.2.0.0 allows an authenticated attacker to upload a file with dangerous type CWE-434. To exploit, an attacker could add a GIF header to bypass MIME type checks. GIF89a; Usage usage: CVE-2023-38836.py -h -u URL -U USER -P PASSWD -l LHOST...

Imperva_gzip_bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...

CVE-2024-38063-POC

IPv6脆弱性パケット送信機：メモリ破損用 CVE-2024-38063 このPythonスクリプトは、潜在的なメモリ破損の脆弱性CVE-2024-38063をトリガーするために細工されたパケットを送信するように設計されています。Scapyライブラリを使用してIPv6パケットを作成・送信し、必要に応じて指定されたMACアドレスを使用します。このスクリプトは複数のネットワークインターフェースを処理できます。 特徴 オプションのインターフェースヘッダー付きで細工されたIPv6パケットを送信します。 宛先IPとオプションでMACアドレスを設定します。 パケット送信の試行回数とバッチ数を指定しま...

FortiWeb-CVE-2025-52970-Authentication-Bypass

🚨 FortiWeb 인증 우회 → 원격 코드 실행 📌 개요 이 저장소는 원격 코드 실행RCE으로 연계할 수 있는 FortiWeb 인증 우회 를 시연합니다. 이 익스플로잇은 취약한 엔드포인트를 악용하여 SQL 페이로드를 주입하고, 웹셸을 업로드하며, HTTP 헤더를 통해 명령을 실행합니다. ⚠️ 면책 조항 : 이 프로젝트는 교육 및 연구 목적 으로만 제공됩니다. 소유하지 않았거나 테스트에 대한 명시적 허가를 받지 않은 시스템에는 사용하지 마십시오. Netlas, FOFA 및 Shodan FortiWeb AND port:"8443"...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.0 RCE vulnerability This is a script to exploit CVE-2017-5638 - It allows an attacker to inject OS commands into a web application through the content-type header Apache Struts 2 is an open-source web application framework for developing Java EE web applications. It...

CVE-2026-105396

Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation - NTFS Alternate Data Streams...

cve-2026-41940-PoC

CVE-2026-41940 ⚠ このツールは教育またはバグバウンティの目的のみで作成されています。管理された環境外での不正使用は固く禁止されています。 説明 CVE-2026-41940を悪用するためのツールです。これはcPanel & WHMにおける重大な認証バイパス（CVSS 10.0）であり、認証されていない攻撃者がAuthorizationヘッダーを介してサーバー側のセッションファイルにCRLFシーケンスを注入することで、rootレベルのWHMアクセスを取得できるものです — 認証情報は不要です。 仕組み...

CVE-2018-0114-PoC

CVE-2018-0114 PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Example $ python3 script.py Making keys... 'alg': 'RS256', 'jwk': 'kty': 'RSA', 'kid': '[email protected]', 'use':...

ps5-uart

살리나 근처의 24핀 헤더 EDM-010 emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. emc 부팅 시 low로 당기면 emc rom이 460800 속도로 uart 셸에 진입함 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, emc 리셋 시 low로 떨어짐 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw: 691200 12 titania uart0 rx efc fw: 460800, eap fw:...

CallStranger

CallStranger 이 스크립트는 CallStranger CVE-2020-12695 취약점을 확인하기 위해 Yunus Çadırcı https://twitter.com/yunuscadirci가 제작했습니다. 공격자는 이 취약점을 다음과 같은 목적으로 사용할 수 있습니다. 데이터 유출을 위한 DLP 우회 증폭 반사 TCP DDoS / SYN Flood의 소스로 수백만 개의 인터넷 노출 UPnP 장치 사용 인터넷 노출 UPnP 장치를 통한 내부 포트 스캔 이 스크립트는 데이터 유출만 시뮬레이션합니다. 자세한 정보는...

apple-positional-audio-codec-invalid-header

CoreAudio 패치CVE-2025-31200에 대한 개념 증명, iOS 18.4.1에서. 설명 글은 https://blog.noahhw.dev/posts/cve-2025-31200/ 에 있습니다. 업데이트 2025/05/27 이를 제한된 범위이지만 임의 쓰기로까지 발전시킬 수 있었습니다. 설명 글은 곧 올라옵니다. 직접 확인하려면 패치 이전 버전의 macOS 15.4.1에서 빌드해야 합니다. check-mismatch lldb 훅을 사용하여간단한 harness로 오디오를 재생하는 방식 오디오를 재생하면 쓰기를 확인할 수...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: AppArmor: A memory leak was fixed in the verifyheader function. The function sets ns = NULL on every call, causing a memory leak in the namespace allocated during previous iterations when multiple profiles are unpacked. This also...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - mctp i2c: Handle the NULL header address. - daddr can be NULL if there is no neighbour table entry present; in that case, the TX packet should be discarded. - saddr is usually set by the MCTP core, but check for NULL in case...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: nsh: Added restoration of skb-protocol, data, macheader for the outer header in nshgsosegment. The syzbot exploited various vulnerabilities by using a crafted GSO packet for VIRTIONETHDRGSOUDP that included the following...