Catálogo de exploits

XML external entity (XXE) vulnerability in /ssc/fm-ws/services in Fortify Software Security Center (SSC) 17.10, 17.20 & 18.10 (0day CVE-2018-12463)

lonehand/Oracle-WebLogic-CVE-2017-10271-master

likekabin/CVE-2018-2628

Aruthw/CVE-2014-6271

qy1202/https-github.com-Ridter-CVE-2017-11882-

Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden iframe that redirects victims to Rig’s landing page, which includes an exploit for CVE-2018-8174 and shellcode. This enables remote code execution of the shellcode obfuscated in the landing page. After successful exploitation, a second-stage downloader is retrieved, which appears to be a variant of SmokeLoader due to the URL. It would then download the final payload, a Monero miner.

stevenlinfeng/CVE-2018-2628

Exploitable target to CVE-2017-5638

guwudoor/CVE-2018-8214

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Text Annotations. When setting the point attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process.

leandrocamposcardoso/CVE-2017-5638-Mass-Exploit

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

Cisco ASA - CVE-2018-0296 | Exploit

Test CVE-2018-0296 and extract usernames

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.

Ektron Content Management System (CMS) 9.20 SP2, remote re-enabling users (CVE-2018–12596)

CVE-2017-5792

MS15-034 HTTP.sys 远程执行代码检测脚本（MS15-034 HTTP.sys remote execution code poc script）

malindarathnayake/Intel-CVE-2018-3639-Mitigation_RegistryUpdate

CVE-2016-2098 simple POC written in bash

Demo-ing CVE-2017-1000253 in a container

Shellshock vulnerability attacker

Just a couple exploits for CVE-2018-11510

POC for CVE-2018-0824

MySQL 4.x/5.0 (Linux) - User-Defined Function (UDF) Dynamic Library (2) automation script.

empty_list - exploit for p0 issue 1564 (CVE-2018-4243) iOS 11.0 - 11.3.1 kernel r/w

CVE-2018-4878 flash 0day

A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.

teawater/CVE-2017-5123

CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7