Catálogo de exploits

CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user.

A bash automation that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7

Wonder CMS RCE (XSS)

基于135端口检测目标是否存在CVE-2024-38077漏洞

检测RDL服务是否运行，快速排查受影响资产

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)

Unauthenticated Remote Code Execution in SPIP versions up to and including 4.2.12

lworld0x00/CVE-2024-38077-notes

Perform With Massive Apache OFBiz Zero-Day Scanner & RCE

Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

it is script designed to exploit certain vulnerabilities in routers by sending payloads through SNMP (Simple Network Management Protocol). The script automates the process of authorization, payload generation, and execution, allowing for remote command execution on the target device.

elliotosama/CVE-2012-2982

it is script designed to interact with a router by sending a payload to its system tools. The script retrieves the router's configuration from environment variables to ensure security. It includes functions for generating an authorization header, sending a payload, and logging the process.

jtoalu/CTF-CVE-2019-9053-GTFOBins

Sec-Link/CVE-2024-38077

SecStarBot/CVE-2024-38077-POC

RDL的堆溢出导致的RCE

远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查

CVE-2024-38077，本仓库仅用作备份，

psl-b/CVE-2024-38077-check

An alternative solution(as a Magento 2 extension) to fix the XXE vulnerability CVE-2024-34102(aka Cosmic Sting). If you cannot upgrade Magento or cannot apply the official patch, try this one.

bolkv/CVE-2024-4320

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856)

exploit que vulnera Jenkins hecho en Python

CVE-2024-41651

VanishedPeople/CVE-2017-7269

This repository details a SQL Injection vulnerability in Inventio Lite v4's, including exploitation steps and a Python script to automate the attack. It provides information on the vulnerable code, recommended fixes, and how to extract and decrypt administrative credentials.

CVE-2024-32113 Apache OFBIZ Batch Scanning

CVE-2024-6387-checker is a tool or script designed to detect the security vulnerability known as CVE-2024-6387 OpenSSH. CVE-2024-6387 OpenSSH is an entry in the Common Vulnerabilities and Exposures (CVE) that documents security weaknesses discovered in certain software or systems.

CVE-2024-6387-checker is a tool or script designed to detect the security vulnerability known as CVE-2024-6387 OpenSSH. CVE-2024-6387 OpenSSH is an entry in the Common Vulnerabilities and Exposures (CVE) that documents security weaknesses discovered in certain software or systems.