Catálogo de exploits

Alienfader/CVE-2020-29607

yenyangmjaze/cve-2024-10914

demonstriert, wie mittels missbräuchlicher Nutzung eines Swap-Cookies eine VPN-Session übernommen werden kann. Wichtig: Dieses Projekt dient ausschliesslich zu Bildungs- und Forschungszwecken – bitte nur in Umgebungen verwenden, in denen Du explizit authorisiert bist.

Yami0x777/Belsen_Group-et-exploitation-de-la-CVE-2022-40684

cve-2019-5420 POC simple ruby script

This is a repository for Apache HugeGraph Remote Code Execution vulnerability(CVE-2024-27348))

skrkcb2/CVE-2024-5452

SSHEnum es una herramienta de enumeración de usuarios SSH basada en CVE-2018-15473. Permite detectar usuarios válidos aprovechando respuestas diferenciadas del servidor. Es rápida, compatible con Python 3.12 y soporta wordlists. Uso exclusivo para auditoría y pruebas de seguridad autorizadas.

0x7556/CVE-2024-55591

RogelioPumajulca/CVE-2022-0847

pz-frontend-manager < 1.0.6 - CSRF Profile Picture Exploit

This repository contains a Proof-of-Concept (PoC) exploit for the Baron Samedit vulnerability (CVE-2021-3156). The exploit demonstrates privilege escalation on Ubuntu 20.04 with sudo version 1.8.31 and glibc version 2.31. It includes an assembly-based exploit, a shared object payload, and a Makefile for automated compilation.

Cityworks deserialization of untrusted data vulnerability Detection

Snizi/Moodle-CVE-2024-43425-Exploit

PoC of CVE-2022-30190

Directory Traversal Exploit written in Bash for NVMS-1000 (CVE-2019-20085).

This is a Python script that exploits the CVE-2024-6624 vulnerability in the JSON API User <= 3.9.3 plugin for WordPress.

Python script for CVE-2024-0012 / CVE-2024-9474 exploit

KGorbakon/CVE-2023-41425

Arthikw3b/RCE-CVE-2024-7954

cy3erdr4g0n/CVE-2024-10924

SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]

daikinitanda/-CVE-2024-47875-

qw3rtyou/CVE-2021-44228_dockernize

CVE-2019-2215 poc for Huawei hardened kernel

In this challenge, I analyzed the Spring4Shell (CVE-2022-22965) vulnerability, investigated security bypasses, and wrote an Incident Postmortem Report detailing the detection, impact, and resolution of the attack. I also implemented a firewall rule in Python to block malicious requests and prevent future exploitation.

This script checks for devices vulnerable to the EternalBlue exploit (CVE-2017-0144) in a network using SMB.

Code to decrypt Huawei passwords CVE-2012-4960

CVE-2017-8869 - MediaCoder 0.8.48.5888 - Local Buffer Overflow (SEH)

This code is taken from "Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)" and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Drupal".