CVE-2018-14714-POC

CVE-2018-14714-POC 25 Abr 2020, Altin Thartori, github.com/tin-z Detalles de la vulnerabilidad Inyección de comandos del sistema en appGet.cgi en ASUS RT-AC3200 versión 3.0.0.4.382.50010 permite a los atacantes ejecutar comandos del sistema a través del parámetro URL "loadscript" Referencias para...

CVE-2016-4463

CVE-2016-4463 An implementation of the CVE-2016-4463 exploit. Xerces 3.1.3 and below exploit. I meant to get this submitted to Exploit-DB, but I do not have a good go-to app to test this against. Java OpenSAML should be vulnerable, but it will take some time to explore this...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Crear usuario y grupo exim sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Instalar dependencias sudo apt-get update sudo apt-get install -y make build-essential...

CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - Inyección SQL en 'search'...

CVE-2019-12181

CVE-2019-12181 Exploit de LPE para CVE-2019-12181 Serv-U FTP 15.1.6...

cve-2022-42475

cve-2022-42475 Código POC para explotar el desbordamiento de heap en el daemon SSLVPN de Fortinet Notas Este es un POC rápido y sucio que probablemente no funcione en ningún sitio a menos que tengas mucha suerte. Depende de la versión y contiene algunos offsets codificados que muy probablemente...

CVE-2014-4936

CVE-2014-4936: Malwarebytes Anti-Malware and Anti-Exploit upgrade hijacking ============= This repository contains the POC for CVE-2014-4936. A full writeup on how the vulnerability works and how to exploit it using the POC has been published here:...

CRSprober

CRSprober Description This tool remotely detects the version of the OWASP Core Rule Set CRS used by a ModSecurity WAF. It also identifies the configured paranoia level PL of the CRS, providing insights into the WAF's security posture without requiring local access. Prerequisities Python 3 Usage...

CVE-2026-8181

英文： 用于 Burst Statistics 认证绕过的 授权安全测试 的受控 PoC 和简要技术说明。 土耳其语： Burst Statistics 插件中身份验证绕过的 授权安全测试 用受控 PoC 和简要技术总结。 项目概览 / 项目总结...

CVE-2022-24124

POC para CVE-2022-24124 Código de explotación para CVE-2022-24124 también conocido como inyección SQL de Casdoor Enlaces del exploit: ExploitDB-50792 PacketStormSecurity Resultado esperado: Volcar la versión de la base de datos SQL en el host que ejecuta Casdoor 1.13.1 Diseñado únicamente para...

ssh_exploiter_CVE-2024-6387

sshexploiter CVE-2024-6387 with auto ip scanner and auto expliot OpenSSH Vulnerability Checker & Exploiter This Python script checks if servers are running vulnerable versions of OpenSSH and attempts exploitation if possible. Features SSH Version Detection : Retrieves SSH banner to determine the...

CVE-2024-6387-exploit

Escáner de Vulnerabilidades SSH El Escáner de Vulnerabilidades SSH es un script de Python que utiliza Nmap para escanear una lista de dominios en busca de versiones de SSH vulnerables. Comprueba múltiples puertos para detectar servicios SSH e identifica versiones que se sabe que tienen...

CVE-2024-7339

CVE-2024-7339: Information Leak Vulnerability in DVR devices. Exploiter an Vulnerability detection and Exploitation tool for CVE-2024-7339 Information leak vulnerability in DVR Vulnerability Over 400,000+ devices which leaks information like product model, kernel version and etc. Installation...

PoC-CVE-2025-26529

PoC for CVE-2025-26529 – Moodle XSS to RCE Exploit This is a Proof of Concept PoC demonstrating the SSRF to XSS → XSS to RCE vulnerability chain in Moodle. Overview I’ve uploaded all the necessary files to demonstrate the full chain of exploitation: 1. SSRF to XSS 2. Grabbing the admin cookie 3...

CVE-2022-33075

CVE-2022-33075 Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.htm...

CVE-2023-22527-Godzilla-MEMSHELL

CVE-2023-22527-Godzilla-MEMSHELL Usage ps: The tested version is 8.5.1. Other versions should work, but they haven't been tested. 内容参考北辰师傅之前的工具 java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar http://xxxx/ pass key If...

CVE-2020-17519

Usage & Disclaimer This script is for batch detection of the Apache Flink directory traversal vulnerability CVE-2020-17519. Usage: Python CVE-2020-17519.py urls.txt Each line in urls.txt contains one URL. Vulnerable addresses are output in vul.txt. Affected Versions: Apache Flink 1.11.0, 1.11.1,...

NextSploit

🔍 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ⚠️ NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...

CVE-2023-25136

OpenSSH 脆弱性测试工具 - CVE-2023-25136 此仓库提供了一个用于测试 OpenSSH 9.0 和 9.1 版本中 CVE-2023-25136 漏洞的 概念验证（PoC） 。该漏洞可能导致潜在的安全风险，此工具有助于识别服务器是否运行着存在漏洞的 OpenSSH 版本。 该工具会检查服务器上运行的 OpenSSH 版本，并提示是否受此漏洞影响。 特性 检查 OpenSSH 版本 9.0 和 9.1 ，这些版本可能受 CVE-2023-25136 影响。 易用的命令行界面，可测试单个或多个 SSH 服务器。 支持通过代理服务器进行检查。...

CVE-2023-1545

CVE-2023-1545 Simple script de inyección SQL en Python para Teampass anterior a las versiones 3.0.0.23, aprovechando CVE-2023-1545. Más información en este blog. Uso Solo establece la URL donde se ejecuta Teampass como argumento único: python3 CVE-2023-1545.py http://example.com:8080 Aviso legal...