Catálogo de exploits

Arthikw3b/RCE-CVE-2024-7954

KGorbakon/CVE-2023-41425

SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]

cy3erdr4g0n/CVE-2024-10924

qw3rtyou/CVE-2021-44228_dockernize

CVE-2019-2215 poc for Huawei hardened kernel

In this challenge, I analyzed the Spring4Shell (CVE-2022-22965) vulnerability, investigated security bypasses, and wrote an Incident Postmortem Report detailing the detection, impact, and resolution of the attack. I also implemented a firewall rule in Python to block malicious requests and prevent future exploitation.

Code to decrypt Huawei passwords CVE-2012-4960

This script checks for devices vulnerable to the EternalBlue exploit (CVE-2017-0144) in a network using SMB.

User Profile Builder <= 3.11.7 - Unauthenticated Media Upload

CVE-2024-56898 - Broken access control vulnerability in GeoVision GV-ASManager web application with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts.

CVE-2024-56901 - A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASManager web application with the version 6.1.1.0 or less that allows attackers to arbitrarily create Admin accounts via a crafted POST request.

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

CVE-2024-56902 - Information disclosure vulnerability in GeoVision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password.

This code is taken from "Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)" and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Drupal".

hashdr1ft/SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400

This repository contains a Proof-of-Concept for the CVE-2021-41773. This CVE contains a LFI and RCE vulnerablity.

rehan6658/CVE-2023-40028

CVE-2017-8869 - MediaCoder 0.8.48.5888 - Local Buffer Overflow (SEH)

dorattias/CVE-2025-26319

asepsaepdin/CVE-2022-36804

lukwagoasuman/-home-lukewago-Downloads-CVE-2021-23017-Nginx-1.14

asepsaepdin/CVE-2022-33891

An XNU kernel race condition bug

asepsaepdin/CVE-2023-32315

Proof of Concept for CVE-2022-45460

honeyb33z/cve-2020-11023-scanner

## About The script has been made for exploiting the Laravel RCE (CVE-2021-3129) vulnerability.<br> This script allows you to write/execute commands on a website running <b>Laravel <= v8.4.2</b>, that has "APP_DEBUG" set to "true" in its ".env" file.

asepsaepdin/CVE-2021-42013

CVE-2024-8381: A SpiderMonkey Interpreter Type Confusion Bug.