Flarum < 1.8.5 - Open Redirect

Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum /logout route includes a redirect parameter that allows any third party to redirect users from a trusted domain of the Flarum installation to redirect to any link. For logged-in users, the logout must be...

SuiteCRM - SQL Injection

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue. id: CVE-2024-36412 info: name: SuiteC...

Changedetection.io <=v0.45.21 - Cross-Site Scripting

Changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. In affected versions Input in parameter notificationurls is not processed resulting in javascript execution in the application. A reflected XSS vulnerability happens when...

EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands.The injected comman...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI YAML 파싱 원격 코드 실행 취약점 재현 0x01 shardingsphere 바이너리 패키지 다운로드 wget https://mirror-hk.koddos.net/apache/incubator/shardingsphere/4.0.0/apache-shardingsphere-incubating-4.0.0-sharding-ui-bin.tar.gz 압축 해제 root@kali tar -xf...

Admidio-3.2.8-CSRF-POC-by-Provensec-llc

Admidio-3.2.8-CSRF-POC-от-Provensec-llc Admidio 3.2.8 Межсайтовая подделка запроса Cross-Site Request Forgery. Присвоен номер CVE: CVE-2017-8382 https://www.exploit-db.com/exploits/42005/ http://en.0day.today/exploit/27771...

CVE-2019-9978_Exploit

CVE-2019-9978 익스플로잇 소셜 워페어 플러그인 =3.5.2 원격 코드 실행...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 원격 명령 실행 스크립트 더 많은 스크립트 파일은 다음을 참조하십시오: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-10204 Nexu...

exploit-nginx-1.10.3

이 저장소에는 README가 없습니다...

spring-core-rce

Spring Core RCE/CVE-2022-22965 Сфера влияния: Spring Framework и производные фреймворки на JDK=9 Ссылка на статью Скрипт предназначен только для изучения. Автор не несет ответственности за любое другое использование. 1.Установка pip3 install -r requirements.txt 2.Использование $ python3...

attack_monitor

Attack Monitor Attack Monitor — это приложение на Python, разработанное для улучшения возможностей мониторинга безопасности на рабочих станциях и серверах Windows 7/2008 и всех более поздних версий, а также для автоматизации динамического анализа вредоносного ПО. Текущие режимы взаимоисключающие:...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker CVE-2022-0847 "Dirty Pipe"를 확인하는 Bash 스크립트 https://dirtypipe.cm4all.com/ 사용법 현재 커널 버전 확인 ./dpipe.sh 특정 커널 버전 확인 ./dpipe.sh 5.10.11...

XAttacker

XAttacker V2.5 Инструмент БЕСПЛАТНО XATTACKER — это мощный инструмент для эксплуатации уязвимостей, способный сканировать и автоматически эксплуатировать уязвимости в веб-приложениях. При указании целевого веб-сайта инструмент автоматически определяет его архитектуру, если используется система...

CVE-2020-11444

CVE-2020-11444 Nexus 3 권한 우회 취약점 악용 스크립트 더 많은 스크립트 파일은 다음 참조: https://github.com/zhzyker/exphub Readme +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-11444 Nexus 3 Unauthorized...

CVE-2019-15107

CVE-2019-15107 Python 익스플로잇 CVE-2019-15107 webmin 감사의 글 Metasploit 모듈을 기반으로 함 https://www.exploit-db.com/exploits/47230 원본 권고: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...

CVE-2021-45010

CVE-2021-45010 익스플로잇 제목: Tiny File Manager 2.4.6 인증됨 원격 코드 실행 날짜: 2023년 3월 4일 익스플로잇 작성자: Syd Software 링크: https://github.com/prasathmani/tinyfilemanager 버전: Tiny File Manager = 2.4.3 테스트 환경: Parrot OS 20.04 CVE : CVE-2021-45010 참조:...

CVE-2021-33558

CVE-2021-33558 참고: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 페이로드: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

CVE-2018-6389

CVE-2018-6389 WordPress DoS CVE-2018-6389 참고 https://baraktawily.blogspot.jp/2018/02/how-to-dos-29-of-world-wide-websites.html DoS 방법 WordPress 시작 $ docker-compose up -d Pulling wordpress wordpress:4.9.3... 4.9.3: Pulling from library/wordpress e7bb522d92ff: Pull complete ... 3a3976cecfa7: Pull...