wmohamed2033.github.io

wmohamed2033.github.io CVE-2021-44228 Log4Shell — 渗透测试报告...

metasploitable3-pentest-writeup

Metasploitable3 — Informe de Prueba de Penetración Autor: Arlen Fortunato Fecha: Septiembre 2026 Entorno: Parrot OS atacante → Metasploitable3 Ubuntu 14.04 objetivo Alcance: Prueba de penetración de red completa — enumeración, explotación, escalada de privilegios, post-explotación Tipo: Home Lab ...

CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 的测试 POC...

docker-cve-2016-2107

docker-cve-2016-2107 Contenedor Docker que implementa pruebas para CVE-2016-2107 - LuckyNegative20 Acerca de Prueba dockerizada para CVE-2016-2107. Código escrito por Filippo Valsorda: GitHub de cero a descifrado blog que explica la vulnerabilidad prueba online de CVE-2016-2107 Actualización La...

CVE-2025-55182_PoC-Test-Server

CVE-2025-55182PoC-Test-Server CVE-2025-55182 React RCE 测试服务器...

CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ Uso simple Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Ejemplo de configuración: git clone cd Project u...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Software de Cisco Adaptive Security Appliance - Script de prueba de vulnerabilidad de inclusión de archivos locales LFI Uso python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP default : 80/tcp python Cisco Adaptive Security...

apche-struts-vuln-demo-cve-2018-11776

Demostración de Vulnerabilidad Apache Struts CVE-2018-11776 Descripción Crea un entorno de prueba aislado para experimentar con la vulnerabilidad CVE-2018-11776 de Apache Struts. Comenzando Para iniciar el entorno de prueba, ejecute el siguiente comando: aws cloudformation create-stack ...

log4j2_CVE-2021-44228

log4j2环境测试使用，如出现问题个人承担 我测试环境是java17，如需要自己更改重新导入项目就可以了 启动环境之后得地址：http://127.0.0.1:8006/test...

CVE-2026-44788

CVE-2026-44788 测试...

CVE-2018-1235

CVE-2018-1235 一个用于测试CVE-2018-1235可利用实例的python脚本。 NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 用法: ./CVE-2018-1235.py -t 目标主机 -r 你的IP 此代码可能被修改以主动利用该漏洞。对网络范围的支持可能会稍后添加。...

cve-2020-27955

esto es una prueba de cve-2020-27955...

CVE-2023-24329-codeql-test

Este repositorio no tiene un README...

CVE-2018-17456

CVE-2018-17456 prueba...

can-ctr-escape-cve-2022-0492

A container image that tests whether a container enviroment is vulnerable to escapes via CVE-2022-0492. Best to execute under a new container running an image built with: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest . A pre-built image is available at...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all versions up to, and including, 4.9 The vulnerability exists because the createcontact function in the v3 REST endpoint POST /gh/v3/contacts ...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 4.9 . The flaw exists because the create_contact function in the v3 REST endpoint (POST /gh/v3/contacts) is only gated by the add_contacts cap...

CVE-2026-97644: Improper Privilege Management

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all versions up to, and including, 4.9 The vulnerability exists because the createcontact function in the v3 REST endpoint POST /gh/v3/contacts ...

PT-2026-104494

Name of the Vulnerable Software and Affected Versions Groundhogg — CRM, Newsletters, and Marketing Automation versions prior to 5.0 Description Privilege escalation is possible through contact identity rebinding. The create contact function in the POST /gh/v3/contacts endpoint is only protected b...

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

Summary isPathAllowedForModule decides whether a resolved path belongs to an allowlisted external module using a raw string prefix test. nodemodules/foo2 starts with nodemodules/foo, so a package whose name merely shares a prefix with an allowlisted one is treated as being inside it, and a relati...