879459 matches found
cve-2023-38646-poc
Metabase Pre Authentication RCE CVE-2023-38646 CVE-2023-38646 is a remote code execution vulnerability in Metabase. The vulnerability stems from a security flaw in Metabase's handling of JDBC connection strings when processing the unauthenticated API endpoint /api/setup/validate. An attacker can...
CVE-2023-41425
CVE-2023-41425 Description Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. Working The attached exploit "exploit.py" performs the following actions: 1. It takes 3...
CVE-2018-15365
Reflected XSS in Deep Discovery Inspector 3.8 I've found a reflected XSS vulnerability in the management web interface of Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165 Vulnerable script path is /php/detectiondetailfilter.php. This script is accessible only by an authenticated user,...
CVE-2009-2265
CVE-2009-2265 - Adobe ColdFusion 8 File Upload RCE A Rust implementation of the POC for the CVE-2009-2265 exploit, targeting Adobe ColdFusion 8. Vulnerability Overview This vulnerability allows an unauthenticated attacker to upload arbitrary files to a web-accessible directory on a server running...
POC-CVE-2026-49975
-red CVE-2026-49975 HTTP/2 Bomb β HPACK Compression Bomb + Flow-Control Hold PoC Security Research PoC by naheeju β οΈ This is a working, memory-exhaustion DoS tool β not a toy. It opens streams that force the target to allocate memory and holds them open via HTTP/2 flow-control tricks. As long as...
Quiksand-CVE-2023-24012
DDS Security Test ROS 2 DDS security research test environment, based on ROS 2 Foxy. Project Introduction This project demonstrates a privilege escalation vulnerability in the ROS 2 SROS2 security framework. By modifying signed permission files, an attacker can cause a node to subscribe to topics...
CVE-2025-6325_CVE-2025-6327
CVE-2025-6325 + CVE-2025-6327 King Addons for Elementor β Dual Exploit PoC Research and validation tool for King Addons for Elementor For authorized security testing, vulnerability research, and controlled lab environments only. Overview This project provides a dual-purpose PoC for validating the...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
mkpath
mkpath Make URL path combinations using a wordlist Read a wordlist file and generate path combinations for given domain or list of domains. Input from wordlist file is lowercased and unique words are processed. Additionally, wordlist can be filtered using regex. When you use mkpath's -l parameter...
wifijammer
wifijammer Continuously jam all wifi clients and access points within range. The effectiveness of this script is constrained by your wireless card. Alfa cards seem to effectively jam within about a block radius with heavy access point saturation. Granularity is given in the options for more...
zoneminder-1.29-1.30-rce-exploit
ZoneMinder 1.29/1.30 SQLi to RCE Exploit A ready-to-run Python exploit for ZoneMinder 1.29/1.30 that chains the unauthenticated SQL injection CVE-2016-10204 , EDB-41239 all the way to an interactive reverse shell. This is a weaponized/automated PoC for a known, patched CVE, not a new exploit. EDB...
BruteForce-to-KeePass
BruteForce-to-KeePass This script complements the results obtained through the keepass-password-dumper tool when exploiting the CVE-2023-32784 vulnerability affecting KeePass. Description This script prompts the user to input a list of characters and a known suffix. It then generates a list of...
CVE-2023-40028
CVE-2023-40028: Ghost arbitrary file read Proof of concept for CVE-2023-40028, an authenticated arbitrary file-read vulnerability in Ghost's content import feature. A crafted ZIP archive creates a symlink under content/images, allowing the script to request a file from the Ghost host. Ghost...
RogueAssemblyHunter
. . \ / \ | | | .. | // \ / | | / \ / / \ \ / // // \ / | | | // | /\ / / | \ \ \ /| Y Y \ \ \ | | || // /|/ | / || / // | / // / / / / / / / / / | \ / | / \ | / \ / \ Y / | / | \ | \ /| | / | /|/|| /| | / / / Rogue Assembly Hunter Rogue Assembly Hunter is a utility for discovering 'interesting'...
wordpress-snapcreek
wordpress-snapcreek snapcreekduplicator file read vulnerability https://www.cvedetails.com/cve/CVE-2020-11738/ Step1: Open MSFconsole: and use wordpressscanner to find all plugins used by target machine. STEP2: Attack using python script: Install/ upgrade pip3 on attacker machine Sudo apt install...
CVE-2026-5524-PoC
CVE-2026-5524 β Divi Form Builder Unauthenticated RCE Mass exploit toolkit for CVE-2026-5524 , an unauthenticated arbitrary file upload vulnerability in the WordPress plugin Divi Form Builder = 5.1.8 leading to remote code execution. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector|...
CVE-2024-10914-Exploit
SilverX Exploit Tool π Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. β οΈ Disclaimer This tool is for educational and...
POC-CVE-2021-42013-EXPLOIT
-ff0055?style=for-the-badge&logo=python π₯ CVE-2021-42013 Exploit Framework by Makaveli π Multidimensional Cosmic Hacker Mode activated... An advanced scanning, exploitation, and remote interaction tool designed to detect and exploit the Apache Path Traversal + RCE CVE-2021-42013 vulnerability in...
snapshot-demo
Snapshot Attack Demo This is the original demo of Unanticipated Snapshot Attack found by us. Thanks Intel for the Security Advisory. Build the demo Install Intel SGX SDK and Occlum First of all, anyone willing to run the demo must install Intel SGX SDK and Occlum you can choose to use our modifie...
Malicious code in publish-poc-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf2f71038e46898cc03f9bf5081547bb6d725e6a480ef22b80f4dc259c721d9 On install, the postinstall script in package.json reads the first line of../../README.md from the installer's parent workspace, creates a mktemp...