1333 matches found
Exploit for Insufficient Verification of Data Authenticity in Postfix
PoC for CVE-2023-51764 SMTP SMUGGLING Postfix CVE-2023-51...
Exploit for Server-Side Request Forgery in Resf Rocky_Linux
CVE-2021-40438 - Apache = 2.4.48 - SSRF Python exploit A craf...
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
Description The plugin does not properly protect most of its REST API routes, which attackers can abuse to store malicious HTML/Javascript on the site. Run the following Python script, then visit https://vulnerable-site.tld/wp-admin/admin.php?page=wp-google-maps-menu&action=edit&mapid=1...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio
CVE-2023-28432 CVE-2023-28432 Minio Information isclosure Exp...
Exploit for Code Injection in Qodeinteractive Qode_Essential_Addons
CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Aut...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
CVE-2011-2523-poc This is a python3 script to exploit the CVE...
Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons
CVE-2023-5360 An Open-source EXPLOIT for The Royal Elementor...
Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
CVE-2023-22518 Improper Authorization Vulnerability in Conflue...
Exploit for Classic Buffer Overflow in Draytek Vigor3910_Firmware
CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code exe...
XAMPP 3.3.0 Buffer Overflow
Exploit Title: XAMPP v3.3.0 — '.ini' Buffer Overflow Unicode + SEH Date: 2023-10-26 Author: Talson @Ripp3rdoc Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.0.28/xampp-windows-x64-8.0.28-0-VS16-installer.exe Version: 3.3.0 Tested on: Windows 11 CVE-2023-46517 \ / \ ...
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware
🔍 Cisco IOS XE Web UI Vulnerability Scanner - CVE-2023-20198...
Exploit for CVE-2023-38646
CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabas...
Exploit for CVE-2023-38646
CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabas...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller
CVE-2023-4966 Citrix Memory Leak Exploit 🔒 Leak session token...
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware
Cisco IOS XE Device Scanner User Guide for CVE-2023-20198-Scan...
Royal Elementor Addons and Templates 1.4.78 - Unauthenticated Arbitrary File Upload
Description The plugin does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Note that this vulnerability is identical to https://wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34/ as it was introduce...
Scripts failing intermittently due to permissions denied (401) exception while using PAT
h3. Issue Summary This is reproducible on the Data Center: Yes h3. Steps to Reproduce Create two Jira users: UserA and UserB and two Projects: ProjectA and ProjectB. Restrict access to ProjectA for UserA, and ProjectB for UserB. Create one issue each on ProjectA and ProjectB. Use the below python...
Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity
TeamCity CVE-2023-42793 Exploit This Python script exploits...
SMShell - Send Commands And Receive Responses Over SMS From Mobile Broadband Capable Computers
PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 but rather...