Catálogo de exploits

CVE-2024-54383, https://www.cve.org/CVERecord?id=CVE-2024-54383

Sornphut/CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Ivanti Remote code execution

Exploit for CVE-2024-0402 in Gitlab

Sp4ceDogy/NPE-CS-V-CVE-2021-1675

Unauthenticated remote command execution in Papercut service allows an attacker to execute commands due to improper access controls in the SetupCompleted Java class.

sk00l/CVE-2023-30258

progress moveit cve-2024-5806

cve-2017-5487 wp rest api 취약점

elphon/CVE-2007-2447-Exploit

Zimbra CVE-2024-45519

CVE-2023-40028 is a security vulnerability affecting Ghost CMS versions prior to 5.59.1.

Simulation of the Zerologon (CVE-2020-1472) vulnerability attack in Active Directory on Windows Server 2016 and the use of the Trend Micro Deep Security solution to prevent such attacks.

Python3 Rewrite of SmarterMail < Build 6985 Remote Code Execution found by 1F98D (CVE-2019-7214) POC

A Critical Windows OLE Zero-Click Vulnerability. This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability (CVSS 9.8). This is a memory corruption PoC

This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.

This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.

HFS 2.3m SERVER RCE Vulnerability exploit

Arbitrary file read in Grafana allows an attacker to read server files by abusing a path traversal.

Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload

This exploit targets an unauthenticated SQL injection vulnerability in CMS Made Simple <= 2.2.9 (CVE-2019-9053). It uses a time-based blind SQL injection to extract the username, email, and password hash from the database. Additionally, it supports password cracking using a wordlist.

GazettEl/CVE-2020-24186

x3m1Sec/CVE-2019-0232_tomcat_cgi_exploit

Sornphut/OverlayFS---CVE-2021-3493

PoC exploit for CVE-2012-2982 (Webmin RCE), for educational purposes.

Exploitation for CVE-2022-26923

build-script for CVE-2024-46507 and CVE-2024-46508

Combining CVE-2024-8963 & CVE-2024-8190 - For Unauthenticated RCE on Ivanti CSA 4.6 and below

Python script to exploit CVE-2020-35391 on Tenda F3 V3/V4 routers, enabling unauthorized download of configuration, flash, and syslog files.

GazettEl/CVE-2020-17519