wordpress-upgrade-check

wordpress-upgrade-check Comprobación de solo lectura de la versión del núcleo de WordPress de cada sitio en un servidor , con la tabla de correcciones para CVE-2026-87902 crítica, no autenticada; corregida en WordPress 7.1.2 el 2026-09-22 y retroportada a todas las ramas hasta la 4.7. Para agenci...

CVE-2026-39938

Vulnerability Report: Cacti Unauthenticated RCE on Graph Image Researcher: K | Product: Cacti ≤ 1.2.30 | CVE: CVE-2026-39938 01 Vulnerability Summary Field| Value ---|--- Product| Cacti — The Complete RRDtool-based Graphing Solution Affected Versions| ≤ 1.2.30 Vulnerability Class| CWE-22: Path...

CVE-2021-41773-Exploit-Lab

CVE-2021-41773 — Exploit Development Lab Overview This project documents the research, reproduction, and Proof-of-Concept PoC development for CVE-2021-41773, a Path Traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability was reproduced in an isolated Docker laboratory...

CVE-2024-30956

CVE-2024-30956 cf https://www.lauyan.com/en/toweb-updates.htmliyFEw37D DOM-based XSS HTML Injection vulnerability in TOWeb version 5 eg http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP navigate to the url, the JS code is executed PS: src contains a copy ...

ghidra-firmware-utils

Ghidra Firmware Utilities Various modules for Ghidra to assist with PC firmware reverse engineering. This was accepted as a coreboot project for GSoC 2019. Features PCI option ROM loader Implements a FS loader for PCI option ROMs handles hybrid ROMs with multiple images, e.g. legacy x86 + UEFI...

CVE-2021-42013

CVE-2021-42013 - Apache HTTP Server 2.4.50 How to Run CVE-2021-42013-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this github repo 3. Go to the Path Traversal folder 4. Enter the following commands docker build -t cve-2021-42013-path-traversal . and docker run --rm -dit...

bash-4.2-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

CVE-2021-3156

Exploit CVE-2021-3156 Executing: $ git clone https://github.com/RodricBr/CVE-2021-3156 $ cd CVE-2021-3156/ $ chmod u+x programa.sh $ ./programa.sh One-Liner: AA=$sudo --version | tr ':space:' ','| tr -d '.' | cut -d ',' -f3 | awk 'print $0'; "$AA" -lt 1828 && echo -e "Exploitável\nCVE-2021-3156";...

spring-boot-cve-2022-22965

= Spring Framework version override showcase This repository showcases how you can override the Spring Framework version of a Spring Boot 2.4-based application. Spring Boot 2.4.x is https://spring.io/projects/spring-bootsupportout of OSS support, the latest version is 2.4.13. It uses Spring...

cve-2025-22223-demo-1.0.0

cve-2025-22223-demo-1.0.0 cve-2025-22223 Vulnerability Reproduction...

MLflow-Vuln

Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf MLflow-Vulnerability MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced One of the most popular tools in a ML system is MLflow that is used for managing end-to-end machine learning lifecycle. I tested the security of MLflow and reproduced ...

CVE-2024-6387-Checker

CVE-2024-6387-Checker This tool scans your network for hosts running vulnerable versions of OpenSSH CVE-2024-6387. It can handle single IPs, multiple IPs, CIDR ranges, and CSV files with custom ports. Requirements Install the required libraries using pip: pip install paramiko netaddr pandas...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Cisco Adaptive Security Appliance Software - Local File Inclusion Vuln Test sciript Usage python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP default : 80/tcp python Cisco Adaptive Security Appliance Software 9.11 - Local Fi...

CVE-2018-1335

CVE-2018-1335 RCE vulnerability remote code execution on servers apache Tika-server with versions lower than 1.18 commands: sudo bash install.sh python2 exploit.py...

CVE-2024-25202

CVE-2024-25202 A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown functionality of the file search bar that called search-result.php and search-visitor.php . The vulnerability is Cross-Site-Scripting XSS...

apache__uima-uimaj_CVE-2022-32287_3-3-0

Welcome to the Apache UIMA Java SDK Apache UIMAUIMA helps you managing unstructured data such as texts that is enriched useful information. For example, if you want to identify a mention of an entity in a text or possible link that entity to a reference dataset, then Apache UIMA provides: a...

linux-4.19.72_CVE-2022-30594

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2015-6967

CVE-2015-6967 An exploit for the Nibbles manager version 4.0.3. This exploit allows RCE to be performed. Requirements optparse, signal, requests Usage python3 CVE-2015-6967.py --url http://10.129.156.150/ --username admin --password nibbles + Login Succesfuly! + Uploading shell... Shell has been...

CVE-2019-9053-Fixed

The user assumes all responsibility for any action taken using this tool. If these terms are not acceptable to you, please do not use this tool. Use it only in environments where you are permitted to perform pentesting activities Bug fixes for the CVE-2019-9053 exploit Some bug fixes for the...

WP-Links-Page-CVE-Report

WP-Links-Page-CVE-Report Disclosure for CVE-2025-10175 CVE-2025-10175 - Vulnerability in WP Links Page This repository discloses a vulnerability discovered in WP Links Page getresults"SELECT FROM $table WHERE id = $id ..." Attack Vector : Authenticated nonce required AJAX-based Blind SQL Injectio...