1726 matches found
Exploit for Code Injection in Craftcms Craft_Cms
Before you run script again do fuser -k 6666/tcp...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
Check-Pointpoc Check-Point安全网关任意文件读取漏洞CVE-2024-24919 pytho...
Exploit for Path Traversal in Ghost
CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
CVE-2024-50379 Proof of Concept PoC This repository contain...
Exploit for Path Traversal in Bazarr
Bazaarpoc Bazaar v1.4.3 任意文件读取漏洞CVE-2024-40348 python Baza...
Exploit for Unrestricted Upload of File with Dangerous Type in Cleo Harmony
CVE-2024-50623 Cleo Unrestricted file upload and download PoC...
Exploit for CVE-2024-55557
CVE-2024-55557 Usage bash python3 exploit.py --local...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 Exploit Proof-of-Concept Overview This rep...
Exploit for CVE-2024-42327
cve-2024-42327 usage: cve-2024-42327.py -h -u URL -n USERN...
Exploit for OS Command Injection in Yogeshojha Rengine
reNgine 2.2.0 - Command Injection - CVE-2023-50094 Descri...
GHSA-M26C-FCGH-CP6H cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Summary utils.getsharedsecret always returns -1 - allows anyone to connect to cobbler XML-RPC as user '' password -1 and make any changes. Details utils.py getsharedsecret: def getsharedsecret - Unionstr, int: """ The 'web.ss' file is regenerated each time cobblerd restarts and is used to agree o...
UBUNTU-CVE-2024-50636
PyMOL 2.5.0 contains a vulnerability in its "Run Script" function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can craft a malicious .PYM file containing a Python reverse shell payload and exploit the function to achieve Remote Command Execution RCE...
PT-2024-34371 · Schrödinger · Pymol
Name of the Vulnerable Software and Affected Versions: PyMOL version 2.5.0 Description: The issue arises from the "Run Script" function in PyMOL, which allows the execution of arbitrary Python code embedded within .PYM files. This enables attackers to craft malicious .PYM files containing Python...
CyberPanel upgrademysqlstatus Arbitrary Command Execution
import httpx import sys def getCSRFtokenclient: resp = client.get"/" return resp.cookies'csrftoken' def pwnclient, CSRFtoken, cmd: headers = "X-CSRFToken": CSRFtoken, "Content-Type":"application/json", "Referer": strclient.baseurl payload = '"statusfile":"/dev/null; %s; ","csrftoken":"%s"' % cmd,...
SmartAgent 1.1.0 Remote Code Execution Vulnerability
Exploit Title: SmartAgent v1.1.0 - Unauthenticated Remote Code Execution Exploit Author: Alter Prime Vendor Homepage: https://smarts-srlcom.com/, https://smartagent.com Version: Build v1.1.0 Tested on: Kali Linux An unauthenticated user can access a php script called...
Exploit for Code Injection in Vmware Spring_Framework
Expoitation-de-la-vuln-rabilit-CVE-2022-22965 La vulnérabilité...
SmartAgent 1.1.0 Server-Side Request Forgery
Exploit Title: SmartAgent v1.1.0 - Server-Side Request Forgery SSRF Date: 01-10-2024 Exploit Author: Alter Prime Vendor Homepage: https://smarts-srlcom.com/, https://smartagent.com Version: Build v1.1.0 Tested on: Kali Linux An unauthenticated user can trigger the web server to perform web reques...
Exploit for Cross-site Scripting in Wondercms
CVE-2023-41425 Writing one b...