CVE-2018-18441-exploit

CVE-2018-18441-exploit D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1,...

panrapidcheck

PAN Rapid Check Simpleyou should probably just do this in bash with grep PANOS support file checker that extracts some places to look for CVE-2024-3400 IoCs Generate the support file from Device - Support - Generate Tech Support file iocs.txt should include IPs/hosts from known bad for example...

CVE-2020-25627

CVE-2020-25627 Stored XSS via moodlenetprofile parameter in user profile My PoC about this CVE User requirement: Student Or the site for registeration XSS in moodlenetprofile Step 1: Log in with an authenticated user Can register or through creating a new user without assigning roles Step 2: Quic...

JOP_ROCKET

JOP ROCKET NOTE: With 2.15, we introduce the two-gadget disaptcher--this significantly expands possibilities with dispatcher gadgets. A lot of optimizations and additional new features have been added with 2.15 on May 26, 2021. Update: November 29, 2021: I have uploaded the slides for @Hack in...

detect-log4j-exploitable

CVE-2021-44228 An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. This script will help to detect log4j exploit from the running process. It helps to find if any system is exploitable ...

CVE-2024-21413

CVE-2024-21413 This Python script is used to abuse the CVE-2024-21413 coined "MonikerLink" TryHackMe Room: MonikerLink Assumptions This PoC has been created for a lab environment which means the server needs to be configured in a specific setting i.e. TLS authentication is not supported for...

CVE-2025-27520-PoC

CVE-2025-27520 — Safe Educational Simulation / PoC Demo Stand ⚠️ Important: This is a safe educational simulation of the CVE-2025-27520 vulnerability. The project includes a simulation service Flask and a safe PoC scanner Python. On receiving a test marker, the simulation creates an evidence file...

CRACK12

CRACK12 rooting an ATOZEE P12 on Android 14 using CVE-2022-38694 — because fastboot oem unlock said no, so we found another way. what even is this so there's this tablet. the ATOZEE P12. you've never heard of it. nobody has. it costs like $80 and the manufacturer's name sounds like someone fell...

CVE-2023-1545-POC

Overview This contains a proof-of-concept script for CVE-2023-1545 in Teampass The original report containing the POC was made private, so this has been uploaded as a reference to those who might have missed the original. I take no credit for the creation of this script...

SQLi_Sleeps

SQLiSleeps It is a simple script that allows to find SQLi vulnerabilities, obtaining the response time greater than 20 seconds per medium and time-based injection. usage: SQLiSleeps2.py -h -u URLS -d DATA -c COOKIE Realiza una petición GET a múltiples URLs con diferentes datos. options: -h, --hel...

CVE-2025-55130

CVE-2025-55130 - Node.js Permission Model Symlink Escape / | | | | |/ \ / \ | | | | / | // \ | | || | || || || | | | | \ | \ \ | | | | | | |/|| \ ||| ||/||| | || | || | |/ |//||// Node.js Permission Model Bypass via Crafted Symlinks Discovered by natann @ JFrog Overview A path traversal flaw in...

CVE-2026-30691

CVE-2026-30691 - Vulnerability Advisory Official MITRE vulnerability record details and technical documentation for CVE-2026-30691. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote...

Zygotroller

Zygotroller Remove profile owners/Family Link on ANY pre June 2024 Developer Mode device Android 12+ Zygotroller is a proof-of-concept that can remove a profile owner and associated restrictions with CVE-2024-31317's Zygote injection bug. It requires developer mode and the latest security patch t...

CVE-2014-6271-Shellshock-

Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demonstration Lab Shellshock CVE-2014-6271 is one of the most influential remote code execution vulnerabilities ever discovered. The flaw affects Bash and allows attackers to execute arbitrary commands simply by injecting crafted payloads in...

CVE-2019-0708

CVE-2019-0708 - BlueKeep RDP RDP Connection Sequence: https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-rdpbcgr/023f1e69-cfe8-4ee6-9ee0-7e759fb4e4ee Analysis of RDP Service Vulnerability:...

pfsense-api-snort-file-join

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-snort-file-join pfsense-api-snort-file-join Class: File read Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate GET /services/snort/rules/name/file takes two path parameters, both...

Block-Spring4Shell

Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...

CVE-2020-14882

CVE-2020-14882 This script enables remote code execution RCE on Oracle WebLogic Server using an unauthenticated GET request. It exploits the vulnerability CVE-2020-14882. By executing arbitrary commands, an attacker can gain unauthorized access to the server. Exploit Details Exploit Title: Oracle...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 📖 Description This repository contains a high-performance, parallelized...

CVE-2024-24549

Apache Tomcat DoS Exploit CVE-2024-24549 Description This repository contains a proof-of-concept PoC exploit for a denial-of-service DoS attack against Apache Tomcat version 9.0.83 , based on an issue identified in the handling of HTTP headers and payloads. This script generates malicious HTTP...