Exploit catalog

mitigation script by disabling ipv6 of all interfaces

CVE-2024-38077,仅支持扫描测试~

This exploit was created to exploit an XXE (XML External Entity). Through it, I read the backend code of the web service and found an endpoint where I could use gopher to make internal requests on Zabbix vulnerable to RCE.

fortra/CVE-2024-30051

Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers.

JolyIrsb/CVE-2024-4956

Adobe Commerce XXE exploit

This is my exploit for CVE-2024-22120, which involves an SSRF vulnerability inside an XXE with a Gopher payload.

K7 Ultimate Security < v17.0.2019 "K7RKScan.sys" Null Pointer Dereference PoC

jFriedli/CVE-2023-3897

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors.

This repository contains detailed documentation and code related to the exploitation, detection, and mitigation of two significant vulnerabilities: CVE-2020-0796 (SMBGhost) and Print Spooler.

This script is a proof-of-concept exploit for pfBlockerNG <= 2.1.4_26 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads, executes a command, and then deletes the shell.

CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user.

A bash automation that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7

Wonder CMS RCE (XSS)

Unauthenticated Remote Code Execution in SPIP versions up to and including 4.2.12

Perform With Massive Apache OFBiz Zero-Day Scanner & RCE

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)

基于135端口检测目标是否存在CVE-2024-38077漏洞

lworld0x00/CVE-2024-38077-notes

检测RDL服务是否运行，快速排查受影响资产

远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查

CVE-2024-38077，本仓库仅用作备份，

RDL的堆溢出导致的RCE

SecStarBot/CVE-2024-38077-POC

psl-b/CVE-2024-38077-check

Sec-Link/CVE-2024-38077

it is script designed to interact with a router by sending a payload to its system tools. The script retrieves the router's configuration from environment variables to ensure security. It includes functions for generating an authorization header, sending a payload, and logging the process.

elliotosama/CVE-2012-2982