CVE-2017-7269

CVE 2017.7269 PoC Índice CVE 2017.7269 PoC Índice Autores Resumen ¿Qué es Microsoft IIS? ¿Qué es Microsft Windows Server? ¿Qué es WebDAV? Descripción Uso: Referencias y Descubridores Autores NoexDevPen - Perfil de Beacons mag4no10 - Perfil de Beacons Resumen ¿Qué es Microsoft IIS? Internet...

webdav_exploit

webdavexploit Un exploit para Microsoft IIS 6.0 CVE-2017-7269 basado en https://github.com/edwardz246003/IISexploit pero funciona de forma remota uso python exploit.py -d http://www.eliuha.com/eliuha...

IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 y sigue dando de sí... Última presentación: Más allá de la divulgación de nombres cortos de archivos en Microsoft IIS Última entrada del blog: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 Una pequeña herramienta para crear un PoC para CVE-2000-0649. Uso Este script verifica si el servidor es vulnerable a CVE-2000-0649. Ten en cuenta experimentar con HTTP, HTTPS y diferentes rutas. En mi experiencia, la divulgación ocurre principalmente al conectar a través de HTT...

CVE-2017-0055-PoC

CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ CROSS SITE SCRIPTING Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Base Score: 6.1 Severity: Medium Exploit: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

cve-2017-7269-tool

Herramienta de webshell y shellcode para cve-2017-7269 compilación csc cve-2017-7269.cs uso CVE-2017-7269 parms Header: -h especifica el host para la cabecera If -p especifica el puerto para la cabecera If -s especifica el esquema para la cabecera If -l longitud de la ruta física WebShell: -w sub...

EUVD-1999-1525

Malware in sbrugna...

EUVD-2019-9923

Malware in sbrugna...

EUVD-2005-0872

Malware in sbrugna...

EUVD-2006-5842

Malware in sbrugna...

EUVD-2017-0422

Malware in sbrugna...

EUVD-2007-1275

Malware in sbrugna...

EUVD-2006-1398

Malware in sbrugna...

EUVD-2006-6561

Malware in sbrugna...

EUVD-2019-1676

Malware in sbrugna...

PT-2025-38499

CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...

Trimble Cityworks 15.x < 15.8.9 / 23.x < 23.10 Deserialization RCE

The version of Trimble Cityworks installed on the remote host is 15.x prior to 15.8.9, or 23.x prior to 23.10. It is, therefore, affected by a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet...

CVE-2020-0645

A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'...

CVE-2019-1365

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...