Modified-CVE-2019-15107

CVE-2019-15107 Make sure to manually change shellperl LHOST and LPORT on line 29 before execution. Modified from: https://github.com/ketlerd/CVE-2019-15107...

CVE-2025-70559

change Upload directory in python script python3 exploit.py LHOST LPORT...

TencentOS Server 4: kernel (TSSA-2025:0429)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0429 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990494 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989807 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

Linux fc_lport_ptp_setup pointer arithmetic DoS

The vulnerabilities of the functions fclportptpsetup, fcrportcreate in the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow attackers to cause service failures...

CVE-2022-48715: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fcrecvframe mp safe Running tests with a debug kernel shows that bnx2fcrecvframe is modifying the percpu lport stats counters in a non-mpsafe way. Just boot a debug kernel and run the bnx2fc driver with the...

CLSA-2024-1716981167 Fix of 17 CVEs

CVE-url: https://ubuntu.com/security/CVE-2022-48673 - net/smc: Fix possible access to freed memory in link clear CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client:...

UBUNTU-CVE-2023-52809

In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not check the return value of fcrportcreate which can return NULL and would cause a NULL pointer dereference. Address this issue by checki...

KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow

Exploit Title: KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow Exploit Author: DEFCESCO Austin A. DeFrancesco Vendor Homepage: https://github.com/cyd01/KiTTY/= Software Link: https://github.com/cyd01/KiTTY/releases/download/v0.76.1.13/kitty-bin-0.76.1.13.zip Version: ≤...

Exploit for CVE-2023-38646

CVE-2023-38646 A python RCE exploit for CVE-2023-38646 Us...

PT-2023-9353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the fc lport ptp setup function. This function did not check the return value of fc rport create, which can return NULL an...

Symmetricom SyncServer Unauthenticated Remote Command Execution Exploit

This Metasploit module exploits an unauthenticated command injection vulnerability in /controller/ping.php in Symmetricom SyncServer. The S100 through S350 End of Life models should be vulnerable to unauthenticated exploitation due to a session handling vulnerability. This module requires...

Windows shellcode stage, Reverse Ordinal TCP Stager (No NX or Win7)

Custom shellcode stage. Connect back to the attacker Module Options msf use payload/windows/custom/reverseordtcp msf payloadreverseordtcp show actions ...actions... msf payloadreverseordtcp set ACTION msf payloadreverseordtcp show options ...show and set options... msf payloadreverseordtcp run Th...

Windows shellcode stage, Reverse TCP Stager (IPv6)

Custom shellcode stage. Connect back to the attacker over IPv6 Module Options msf use payload/windows/custom/reverseipv6tcp msf payloadreverseipv6tcp show actions ...actions... msf payloadreverseipv6tcp set ACTION msf payloadreverseipv6tcp show options ...show and set options... msf...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 -u URL, --url URL 目标url -c COMM...

iRZ Mobile Router - CSRF to Remote Code Execution Exploit

Exploit Title: iRZ Mobile Router - CSRF to RCE Google Dork: intitle:"iRZ Mobile Router" Exploit Author: Stephen Chavez & Robert Willis Vendor Homepage: https://en.irz.ru/ Software Link: https://github.com/SakuraSamuraii/ez-iRZ Version: Routers through 2022-03-16 Tested on: RU21, RU21w, RL21, RU41...

PT-2022-7535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the bnx2fc recv frame function in the Linux kernel, which modifies the per cpu lport stats counters in a non-mpsafe way. This can lead to a bug when using...

Clinic Management System 1.0 Code Execution / SQL Injection

Exploit Title: Clinic Management System 1.0 - SQL injection to Remote Code Execution Date:21/10/2021 Exploit Author: Pablo Santiago Vendor Homepage: https://www.sourcecodester.com/php/14243/open-source-clinic-management-system-php-full-source-code.html Software Link:...

Cacti 1.2.12 - (filter) SQL Injection / Remote Code Execution Exploit

Exploit Title: Cacti 1.2.12 - 'filter' SQL Injection / Remote Code Execution Exploit Author: Leonardo Paiva Vendor Homepage: https://www.cacti.net/ Software Link: https://www.cacti.net/downloads/cacti-1.2.12.tar.gz Version: 1.2.12 Tested on: Ubuntu 20.04 CVE : CVE-2020-14295 Credits: @M4yFly...