Catálogo de exploits

initial-access

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

initial-access

initial-access

Broken Authentication in Wordpress plugin (Wawp Plugin < 3.0.18)

initial-access

initial-access

This is POC of CVE-2024-29671

Pandora FMS authenticated command injection leading to RCE via LDAP using default DB password

mySCADA myPRO Manager Unauthenticated Command Injection (CVE-2024-47407)

This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt. Simple and efficient, it helps security researchers and admins detect and address risks quickly.

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

initial-access

POC for CVE-2024-10924 written in Python

initial-access

CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability

initial-access

CVE-2023-28354

GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

PANW NGFW CVE-2024-0012

PoC for PAN-OS Exploit

FAFAF

initial-access

initial-access

Exploits Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924).

initial-access

initial-access

local

initial-access