490179 matches found
CVE-2021-41773
CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Usage python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com Reference https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited...
CVE-2020-12593
CVE-2020-12593 CVE-2020-12593 POC Symantec EDR on-prem version prior to "4.5" is prone to an information disclosure vulnerability via the following URL : https://@IPEDR/atpapi/v2/policies/blacklist Reference...
CrackMapExecWin
CrackMapExecWin Description The great CrackMapExec tool compiled for Windows Features Latest 2.2 version Compiled for x86 so should work on x86 and x64 platforms Usage 1. Download the whole archive 2. Extract it and run crackmapexec.exe 3. Profit Older versions Browse the release section to find...
PenetrationTesting_Notes-
Penetration Testing Notes Use cherryTree latest version To Open PenetrationTestingNotes.ctb you can use my preferences settings to get better experience...
CVE-2021-34371
CVE-2021-34371 python exploit - Neo4j 3.4.18 - RMI based Remote Code Execution RCE...
zip4j
zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...
external_zlib_4.4_CVE-2018-25032
ZLIB DATA COMPRESSION LIBRARY zlib 1.2.7 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
linux-4.1.15_CVE-2018-5873
Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...
kalimux
ABOUT TOOL : Kalimux is a bash based script which automatically installs kali linux in termux without any issue and without root. This tool works on both rooted Android device and Non-rooted Android device. AVAILABLE ON : Termux TESTED ON : Termux REQUIREMENTS : internet 1GB storage storage 400 M...
wp2shell-detect
wp2shell-detect Blackbox, non-intrusive detector for wp2shell — the pre-authentication RCE chain in WordPress core disclosed on 2026-07-17: CVE-2026-63030 — route confusion in the REST batch endpoint /wp-json/batch/v1: a sub-request whose path fails wpparseurl lands in the validation array but no...
ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1
Enterprise Security API for Java Legacy OWASP® ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers t...
CVE-2024-2928
CVE-2024-2928 Arbitrary file read exploit for CVE-2024-2928 in mlflow specifically in version 2.9.2, which was fixed in version 2.11.3 The exploit code tested on Linux Source: https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298 Usage python3 CVE-2024-2928.py -t 127.0.0.1 -p 5000 After...
CVE-2026-39983
References https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...
CVE-2019-15053
CVE-2019-15053 FAB-2019-00156 Vulnerability discoverd by me CVE-2019-15053 Advisory: advisory.txt Basic Info Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested...
CVE-2024-28995
SolarWinds Serv-U Directory Traversal Vulnerability POC cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Analysis https://t.co/JPCd6Y4v1g Shodan Querys product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...
CVE-2026-46420
CVE-2026-46420 PoC Command injection in shivammathur/setup-php when the PHP version is loaded from repository controlled files. Affected: = 2.25.0, = 2.37.1 PoC The target repository already has a vulnerable workflow that checks out pull request contents and runs [email protected]. The...
regexploit
Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...
fuxi
Fuxi 2.1 - developing Fuxi is cross-platform compatible and works in any Python 3.x environment including Linux, Mac OSX and Windows. Getting Started Docker docker pull jeffzh3ng/fuxi docker run -itd --name fuxidocker -p 5000:50020 jeffzh3ng/fuxi:latest Wait about 15 seconds for the service to...