Exploit catalog

Chamilo LMS Unauthenticated Remote Code Execution

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

PoC - PHP CGI Argument Injection CVE-2024-4577 (Scanner and Exploit)

Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit

Exploiter a Vulnerability detection and Exploitation tool for GeoServer Unauthenticated Remote Code Execution CVE-2024-36401.

POC

SSH EXPLOIT BYPASS AUTH SSH

GNU IFUNC is the real culprit behind CVE-2024-3094

HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version 3.1.3.150324 + CVE-2021-36260 Detection

puckiestyle/CVE-2023-27532-RCE-Only

CVE-2024-4040 PoC

HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).

Quick regreSSHion checker (based on software version) for nuclei CVE-2024-6387

Vulnerability remediation and mitigationCVE-2024-6387

imv7/CVE-2024-6387

TeamCity RCE for Linux (CVE-2023-42793)

CVE-2024-37770

该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。

CVE-2024-39943 rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df (i.e., with execSync instead of spawnSync in child_process in Node.js).

Provides instructions for using the script to check if your OpenSSH installation is vulnerable to CVE-2024-6387

xzx482/CVE-2024-1086

CVE-2017-12617

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

rewrited SSH Exploit for CVE-2024-6387 (regreSSHion)

iamz24/CVE-2021-3493_CVE-2022-3357

lala-amber/CVE-2024-6387

sms2056/CVE-2024-6387

Welcome to the CVE-2024-6387 OpenSSH Vulnerability Checker repository! This project offers multiple scripts to check the installed version of OpenSSH on your system and determine if it is vulnerable to CVE-2024-6387. It supports various environments, including Ubuntu, Mac, and Windows.

CVE-2024-6387_Check 是一款轻量级、高效的工具，旨在识别运行易受攻击的 OpenSSH 版本的服务器，专门针对最近发现的regreSSHion漏洞 (CVE-2024-6387)。此脚本有助于快速扫描多个 IP 地址、域名和 CIDR 网络范围，以检测潜在漏洞并确保您的基础设施安全。

This repository investigates the exploitation of CVE-2023-34362 in the MOVEit file transfer server by the TA505 (Cl0p) ransomware group. It explores the group's tactics and past campaigns targeting file transfer applications, aiming to enhance understanding and defensive measures against such threats.