Catálogo de exploits

ykg88/OHTS_IE6052-CVE-2020-17087

Multiple vulnerabilities in the vSphere Client (HTML5) were privately reported to VMware. Updates and workarounds are available to address these vulnerabilities in affected VMware products.

POC-CVE-2020-7961-Token-iterate

DarkFlameMaster-bit/CVE-2018-8174_EXP

qianniaoge/CVE-2020-14882_Exploit_Gui

Exploit CVE-2017-9248 Telerik ReMix from Paul Taylor's script. Exploit Telerik lastest version fixed vuln. ReMix by TinoKa & Shaco JX

Qualcomm GPU / ARM Mali GPU

WordPress XXE vulnerability

bgsilvait/WIn-CVE-2021-31166

漏洞POC、EXP合集，持续更新。Apache Druid-任意文件读取（CVE-2021-36749）、ConfluenceRCE（CVE-2021-26084）、ZeroShell防火墙RCE（CVE-2019-12725）、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStudyRCE、ShowDoc任意文件上传、原创先锋后台未授权、Kyan账号密码泄露、TerraMasterTos任意文件读取、TamronOS-IPTV系统RCE、Wayos防火墙账号密码泄露

PoC of how to exploit a RCE vulnerability of the example DAGs in Apache Airflow <1.10.11

tuo4n8/CVE-2020-2950

POC for exiftool vuln (CVE-2021-22204).

ch3rn0byl/CVE-2021-21551

RCE

Local Privilege Escalation is a way to take advantage of flaws in code or service administration that can manage regular or guest users for particular device activities or transfer root user privileges to master or client. User rights admin. The licenses or privileges may be violated by such undesired amendments, as the system may be disrupted by frequent users unless they have shell or root authorization. So, someone, someone, it may become dangerous and be used to obtain access to a higher level.

CVE-2019-14287

Docker image that lets me study the exploitation of the VIM exploit

simple bash script for exploit CVE-2021-31166

HTTP Protocol Stack CVE-2021-31166

PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames

PoC for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. Although it was defined as remote command execution, it can only cause the system to crash.

Different rules to detect if CVE-2021-31166 is being exploited

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

PoC of CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2

Pega Infinity Password Reset

0xm4ud/ProFTPD_CVE-2015-3306

Exploit CVE-2017-7494 for Net Security course final Assignment. This would reveal the vulnerability of services that run in administrative priority on Linux.