Catálogo de exploits

lworld0x00/CVE-2024-38077-notes

检测RDL服务是否运行，快速排查受影响资产

Sec-Link/CVE-2024-38077

CVE-2024-38077，本仓库仅用作备份，

SecStarBot/CVE-2024-38077-POC

远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查

RDL的堆溢出导致的RCE

Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

jtoalu/CTF-CVE-2019-9053-GTFOBins

psl-b/CVE-2024-38077-check

it is script designed to interact with a router by sending a payload to its system tools. The script retrieves the router's configuration from environment variables to ensure security. It includes functions for generating an authorization header, sending a payload, and logging the process.

elliotosama/CVE-2012-2982

it is script designed to exploit certain vulnerabilities in routers by sending payloads through SNMP (Simple Network Management Protocol). The script automates the process of authorization, payload generation, and execution, allowing for remote command execution on the target device.

bolkv/CVE-2024-4320

exploit que vulnera Jenkins hecho en Python

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856)

CVE-2024-41651

An alternative solution(as a Magento 2 extension) to fix the XXE vulnerability CVE-2024-34102(aka Cosmic Sting). If you cannot upgrade Magento or cannot apply the official patch, try this one.

This repository details a SQL Injection vulnerability in Inventio Lite v4's, including exploitation steps and a Python script to automate the attack. It provides information on the vulnerable code, recommended fixes, and how to extract and decrypt administrative credentials.

CVE-2024-32113 Apache OFBIZ Batch Scanning

VanishedPeople/CVE-2017-7269

This Python application scans for the CVE-2023-38831 vulnerability in WinRAR.

Found this on exploit-db, decided to make my own for practice. This exploit will search out the passwd file and print the contents on a vulnerable system.

Calibre 远程代码执行（CVE-2024-6782）Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

CVE-2024-6387-checker is a tool or script designed to detect the security vulnerability known as CVE-2024-6387 OpenSSH. CVE-2024-6387 OpenSSH is an entry in the Common Vulnerabilities and Exposures (CVE) that documents security weaknesses discovered in certain software or systems.

CVE-2024-6387-checker is a tool or script designed to detect the security vulnerability known as CVE-2024-6387 OpenSSH. CVE-2024-6387 OpenSSH is an entry in the Common Vulnerabilities and Exposures (CVE) that documents security weaknesses discovered in certain software or systems.

A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability (CVE-2011-2523) present in vsFTP 2.3.4

nastar-id/CVE-2024-32700

Abdurahmon3236/CVE-2024-36539

Abdurahmon3236/CVE-2024-6366