784664 matches found
CVE-2019-13498
CVE-2019-13498 Exploit Title: MITM - Missing HSTS causing credential theft and content manipulation Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali...
CVE-2023-23397
CVE-2023-23397 CVE-2023-23397 Remediation Script Powershell There are 3 PowerShell scripts. If your patch management software uses an evaluation and a remediation script , use the respective files/scripts. Alternatively, if you wish to just push out the update without the above, the All In One...
fileintel
fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...
CVE-2022-1292
CVE-2022-1292 Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands...
Raccoon
Raccoon Herramienta de Seguridad Ofensiva para Reconocimiento y Recopilación de Información Características Detalles de DNS Mapeo visual de DNS usando DNS dumpster Información WHOIS Datos TLS - cifrados soportados, versiones TLS, detalles del certificado y SANs Escaneo de puertos Escaneo de...
CVE-2021-44228_scanner-main-Modified-
CVE-2021-44228scanner modified - Deprecated Original Script and Repo: https://github.com/CERTCC/CVE-2021-44228scanner Modified by: Alex Pena Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of...
awesome-cybersec
awesome-cybersec Una colección de plataformas, blogs, documentos, libros, recursos y cosas interesantes sobre seguridad. Si bien este repositorio aún está en proceso, el objetivo es construir una colección comunitaria categorizada de recursos muy conocidos. Todo lo bueno en un solo lugar...
mtk-su-reverse-cve-2020-0069
mtk-su just some of my notes String table get decompressed string table by using binwalk -Xe stringtabledump dump from address in idb 0x1F098 compressed size: 1260 if you want the idb open an issue with your email and i'll send it. it's a good starting point if you want to re-write the exploit...
CVE-2022-4616-POC
CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...
hardcodes
hardcodes 从源代码中提取字符串 hardcodes 是一款用于搜索开发者在程序中硬编码的字符串的工具。它使用模块化分词器，能够处理注释、任意数量的反斜杠以及几乎所有你能扔给它的语法。 是的，它旨在处理任何语法，并且官方支持以下语言： root@kitploit: ada, applescript, c, c, c++, coldfusion, golang, haskell, html, java, javascript, jsp, lua, pascal, perl, php, powershell, python, ruby, scala, sql, swift, xml ...
CVE-2024-3094
CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
Thank-u-Next
Thank u Next – Herramienta de Explotación CVE-2025-29927 🧠 ¿Qué es CVE-2025-29927? No es solo un bypass — es una revelación. Un único encabezado, malinterpretado y mal manejado por la lógica del middleware, se convierte en una llave maestra hacia lo que debía estar cerrado. CVE-2025-29927 explota...
CVE-2018-16890
CVE-2018-16890 Se encontró un fallo de lectura fuera de los límites en la forma en que curl manejaba los encabezados NTLMv2 tipo 2. Al conectarse a un servidor remoto malicioso que utiliza autenticación NTLM, el fallo podría provocar que curl se bloqueara. Un script simple para comprobar tu curl...
CVE-2020-13671-old
CVE-2020-13671 RCE via File Upload — Drupal Core Software: Drupal Core 8.7.5 Affected: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type CISA KEV: Yes — Known Exploited Vulnerability Advisory: SA-CORE-2020-012 What is Drup...
CVE-2023-22622
DoS WP-Cron - CVE-2023-22622 Exploit PoC Overview This repository contains a script that exploits the CVE-2023-22622 vulnerability in WordPress, causing a Denial of Service DoS via WP-Cron. This script can be used to flood a vulnerable WordPress site with requests, potentially leading to server...