juumla

🦁 Juumla 🦁 Juumla Juumla es una herramienta de Python creada para identificar la versión de Joomla, escanear vulnerabilidades y archivos sensibles. ⚡ Instalación / Primeros pasos Una guía rápida sobre cómo instalar y usar Juumla. 1. Clone the repository - git clone...

CVE-2022-24124

POC para CVE-2022-24124 Código de Exploit para CVE-2022-24124 también conocido como Casdoor SQL Injection Enlaces del Exploit: ExploitDB-50792 PacketStormSecurity Resultado esperado: Volcar la versión de la base de datos SQL en el host que ejecuta Casdoor 1.13.1 Destinado únicamente para fines...

CVE-2022-42889

Aplicación de prueba CVE-2022-42889 Este repositorio contiene una aplicación simple que utiliza Apache Commons Text 1.10, la cual es vulnerable a CVE-2022-42889. Ejecución de la aplicación Reemplace el comando nc en DemoApplication.java por la dirección IP de su host. Escuchando con netcat: $ nc ...

CVE-2022-42097

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Comment . Attack Vectors: The attacker must post something on the "comment" and insert the XSS payload at the "comment" input, and...

CVE-2021-3572

CVE-2021-3572 This repository is designed for testing CVE-2021-3572 in pypa/pip. For more information, see these resources: CVE page: https://vulners.com/cve/CVE-2021-3572 PR where vulnerability was fixed: https://github.com/pypa/pip/pull/9827 Issue with more discussion:...

CVE-2022-31301

CVE-2022-31301 Haraj Script 3.7 - Post Ads Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31301 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Versio...

CVE-2019-15107_detection

CVE-2019-15107detection Este script determina si un servidor está ejecutando una versión vulnerable de Webmin. Webmin =1.920 inyección de comandos - CVE-2019-15107...

CVE-2019-9053

CVE 2019-9053 Detail Description This code is an implementation of a Time-Based Blind SQL Injection attack in Python 3. The attack is designed to exploit a SQL injection vulnerability in a Content Management System CMS Made Simple 2.2.8 through an HTTP request. Exploit Use: exploit.py -u...

dalfox

Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...

CVE-2025-1661

CVE-2025-1661 Exploit for CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2026-28496-Lab

CVE-2026-28496 - FOSSBilling Server-Side Template Injection in Twig Rendering Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-28496, a Server-Side Template Injection vulnerability affecting FOSSBilling's Twig template rendering behavior...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

CVE-2019-19609

CVE-2019-19609 Strapi = 3.0.0-beta.17.8 authenticated remote code execution...

CVE-2018-16763

CVE-2018-16763 Exploit Title: fuel CMS 1.4.1 - Remote Code Execution Python3 script - 💻 This script was developed by h3x0v3rl0rd...

spraykatz

Spraykatz Esparce amor por el mundo Índice Título| Descripción ---|--- Acerca de| Breve descripción sobre la herramienta Instalación| Instalación y requisitos Uso| Cómo usar Spraykatz Registro de cambios| Historial de cambios de Spraykatz Agradecimientos| Agradecimientos Acerca de Spraykatz es un...

Linux_Exploit_Suggester

LinuxExploitSuggester Linux Exploit Suggester; based on operating system release number. This program run without arguments will perform a 'uname -r' to grab the Linux Operating Systems release version, and return a suggestive list of possible exploits. Nothing fancy, so a patched/back-ported pat...

Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

CVE-2024-36401-PoC

CVE-2024-36401-PoC Exploit de Prueba de Concepto para CVE-2024-36401 GeoServer Versiones vulnerables de GeoServer son anteriores a 2.23.6 | 2.24.4 | 2.25.2 !!! SOLO CON FINES DE PRUEBAS DE SEGURIDAD !!! NO USE ESTO EN SISTEMAS QUE NO POSEAS A MENOS QUE TENGAS PERMISO EXPRESO !!! Para ejecutar... ...