Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer

CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Project Overview This repository contains an academic technical analysis of CVE-2023-34362, a critical SQL injection vulnerability affecting MOVEit Transfer. The project was prepared for CYB625 – Ethical Hacking & Penetration Testing. Importan...

cve-2025-24514

🔥 CVE-2025-24514 Remote Vulnerability Check PoC This script is a Python-based PoC that can remotely check for the CVE-2025-24514 vulnerability NGINX configuration manipulation and potential RCE through auth-url injection in ingress-nginx. 🧠 Vulnerability Overview CVE-2025-24514 is a vulnerability...

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution PHP code injection exploit for Dolibarr ERP/CRM v17.0.0 that allows obtaining a reverse shell as www-data user via the Website/CMS module. ⚠️ For educational purposes and authorized audits only. 📑 Table of Contents What is...

CVE-2022-25765-exploit

CVE-2022-25765 — Command Injection in pdfkit Description CVE-2022-25765 is a command injection vulnerability affecting pdfkit Ruby gem in versions 0.8.7.2. The vulnerability has a CRITICAL severity with CVSS 9.8, as it allows remote command execution without authentication. The problem lies in th...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212- Download files from my repostry using git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git now to set docker image Creating docker image use the command sudo docker build -t work . To...

Critical: Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.5 E4S for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

n8n-CVE-2025-68613-TryHackMe

TryHackMe Room: n8n: CVE-2025-68613 Player: J4ck3LSyN Host: ... Username: [email protected] Password: Try12345! Methodology Payload: function return this.process.mainModule.require'childprocess'.execSync'cat flag.txt'.toString Payload 2: function return...

CVE-2025-59424

CVE-2025-59424 LinkAce Stored Cross-Site Scripting XSS on the /system/audit page...

Simple-CTF-Writeup

Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection CVE-2019-9053, credential recovery, SSH access, privilege escalation via Vim, and root compromise. TryHackMe - Simple CTF Writeup A complete walkthrough of the Simple CTF room on...

CVE-2020-10128

CVE-2020-10128 - SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure encryption, and low total cost of...

s2-048

s2-048 Exp for s2-048, CVE-2017-9791. / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc:...

CVE-2023-49496_PoC

CVE-2023-49496PoC Description UCServer is an advanced converged communication server. Shanghai Shupin Information Technology Co., Ltd. UCServer has a SQL injection vulnerability. Attackers can exploit this vulnerability to obtain sensitive database information. POC POST /login/wwxcorpInfo/ HTTP/1...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection Vulnerability CVE-2022-30525 Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Usage python3 CVE-2022-30525.py -u http://127.0.0....

Kotaemon-CVE-2025-56526-56527-disclosure

Kotaemon CVE-2025-56526 & CVE-2025-56527 Public Disclosure Stored Cross-Site Scripting in the Kotaemon Information Panel combines with plaintext credential storage in localStorage, enabling full session compromise from a single malicious PDF upload. Executive Summary Affected Product / Versions :...

DSL-2750U-Full-chain

firmware-analysis 1. DSL-2750U Bugs : misconfiguration of tftp server CVE-2021-3707 command injection bug CVE-2021-3708...

-exploit-lab

-exploit-lab Exploits Python cve-2019-0708 – by HackHeart 🧠 Code Review & Porting - Python 2 → Python 3 This exploit was originally written in Python 2, which is no longer supported by modern systems. To ensure compatibility and maintain future-proof tooling, the entire codebase has been carefull...

CVE-2018-10933

Recreate & improve scenario of CVE-2018-10933 Explaination This is educational purpose for CVE-2018-10933, which is libSSH bypass authentication! libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS messag...