CVE-2022-22947

CVE-2022-22947 SpringCloudGatewayRCE Code By:Junsheng @橘子网络安全实验室 橘子网络安全实验室 https://0range.team/ 0x00 Panoramica dei rischi Questo strumento è destinato solo a test di sicurezza autorizzati, è vietato attaccare siti senza autorizzazione. Leggi online La Legge sulla Sicurezza Informatica della...

CVE-2021-26084

CVE-2021-26084 Esecuzione Remota di Codice in Confluence RCE Code By:Junsheng @ Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Panoramica dei Rischi Questo strumento è destinato esclusivamente a test di sicurezza autorizzati; sono vietati gli attacchi non...

AmzWord

AmzWord uma cadeia de ataque automatizada baseada em CVE-2022-30190, backdoor de e-mail 163 e esteganografia de imagem Agradecemos aos seguintes repositórios do GitHub, dos quais referenciamos e modificamos parte do código para integrar e implementar nosso trabalho: gdog follina virtual-reality...

cve-2007-2447

CVE-2007-2447 Prerequisiti pysmb Informazioni Il CVE-2007-2447 colpisce Samba dalla versione 3.0.0 alla 3.0.25rc3. Permette agli attaccanti di eseguire comandi shell nel parametro username. Utilizzo Apri una porta in ascolto a tua scelta, imposta le variabili nello script ed esegui lo script...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / Exploit RCE 0-Click Autore: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 Questo repository contiene un exploit proof-of-concept per CVE-2024-51793, una vulnerabilità di upload arbitrario di file non autenticata in un plugin WordPress vulnerabile, che...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2024-51791, eine nicht authentifizierte Schwachstelle zum beliebigen Hochladen von Dateien in einem angreifbaren...

0-click-RCE-Exploit-for-CVE-2024-50498

CVE-2024-50498 / 0-क्लिक RCE एक्सप्लॉइट लेखक: Joshua Provoste https://x.com/JoshuaProvoste/status/1858512517774868845 यह रिपॉजिटरी CVE-2024-50498 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है, जो LUBUS WP Query Console WordPress प्लगइन में एक अनऑथेंटिकेटेड कोड इंजेक्शन भेद्यता है, जो रिमोट कमांड...

0-click-RCE-Exploit-for-CVE-2024-10924

CVE-2024-10924 / प्रमाणीकरण बायपास 2FA से RCE शोषण लेखक: Joshua Provoste https://x.com/JoshuaProvoste/status/1859061671852909055 यह रिपॉजिटरी CVE-2024-10924 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट शोषण है, जो Really Simple Security WordPress प्लगइन में एक प्रमाणीकरण और 2FA बायपास कमजोरी है जिसका उपयोग रिमोट...

0-click-RCE-Exploit-for-CVE-2023-51409

CVE-2023-51409 / Exploit RCE 0-Click Autore: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 Questo repository contiene un exploit proof-of-concept per CVE-2023-51409, una vulnerabilità di caricamento file arbitrario non autenticato nel plugin WordPress AI Engine: ChatGPT...

Log4Shell-PoC

██╗ ██████╗ ██████╗ ██╗ ██╗███████╗██╗ ██╗███████╗██╗ ██╗ ██║ ██╔═══██╗██╔════╝ ██║ ██║██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║ ██║██║ ███╗███████║███████╗███████║█████╗ ██║ ██║ ██║ ██║ ██║██║ ██║╚════██║╚════██║██╔══██║██╔══╝ ██║ ██║ ███████╗╚██████╔╝╚██████╔╝ ██║███████║██║...

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution Script che sfrutta la vulnerabilità che consente l'esecuzione remota di codice in Ruby 2.3.8 con CVE-2016-2098 Uso ./RubyOnRailsActionPackInlineERB-RemoteCodeExecution.py -h --target-host TARGETHOST --port PORT --target-uri TARGETURI...

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script que explora a vulnerabilidade do serviço ProFTP 1.3.5 com CVE-2015-3306 Uso .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

CVE-2007-2447

CVE-2007-2447 Vulnerabilità di Iniezione di Comandi Remoti CVE-2007-2447, consente a un utente malintenzionato remoto di eseguire comandi arbitrari specificando un nome utente Samba contenente metacaratteri di shell...

CVE-2019-0232

CVE-2019-0232 Descrição Esta é uma ferramenta que automatiza o fluxo de trabalho de exploração do CVE‑2019‑0232, oferecendo tanto o modo de execução de comandos quanto o modo de shell reverso. Ela suporta codificação automática de URLs para comandos, inicia um servidor HTTP temporário para hosped...

EUVD-2026-67671

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly...

CVE-2026-40205

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly...

CVE-2026-40205

Open-Xchange (OX) is affected by an OAuth2 token validation flaw in its remote validation paths . When the configuration requires more than one scope, the remote path accepts a token carrying only one of the required scopes, whereas the local validation path correctly enforces all of them. This m...

CVE-2026-40205

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analista: Jonatan Alexander Guerrero Gomez | Ruolo Obiettivo: SOC L1 / Analista di Cybersecurity Junior Stato: Indagine Chiusa | Severità: Alta Executive Summary Esercizio proattivo di threat hunting che identifica un...

EUVD-2026-67663

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...