Catálogo de exploits

Poc for cve-2024-38063

POC

Note: I am not responsible for any bad act. This is written by Chirag Artani to demonstrate the vulnerability.

Comodo

CVE-2024-4577 Exploits

PoC about CVE-2024-27198

CVE-2024-38077,仅支持扫描测试~

An issue in Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

MahdiOsman/CVE-2018-15473-SNMPv1-2-Community-String-Vulnerability-Testing

mitigation script by disabling ipv6 of all interfaces

1amthebest1/CVE-2023-27372

Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers.

fortra/CVE-2024-30051

JolyIrsb/CVE-2024-4956

This exploit was created to exploit an XXE (XML External Entity). Through it, I read the backend code of the web service and found an endpoint where I could use gopher to make internal requests on Zabbix vulnerable to RCE.

Adobe Commerce XXE exploit

This is my exploit for CVE-2024-22120, which involves an SSRF vulnerability inside an XXE with a Gopher payload.

jFriedli/CVE-2023-3897

K7 Ultimate Security < v17.0.2019 "K7RKScan.sys" Null Pointer Dereference PoC

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors.

This script is a proof-of-concept exploit for pfBlockerNG <= 2.1.4_26 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads, executes a command, and then deletes the shell.

This repository contains detailed documentation and code related to the exploitation, detection, and mitigation of two significant vulnerabilities: CVE-2020-0796 (SMBGhost) and Print Spooler.

CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user.

Wonder CMS RCE (XSS)

A bash automation that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)

基于135端口检测目标是否存在CVE-2024-38077漏洞

lworld0x00/CVE-2024-38077-notes

检测RDL服务是否运行，快速排查受影响资产

Perform With Massive Apache OFBiz Zero-Day Scanner & RCE