Catálogo de exploits

CVE-2019-15107 Webmin unauthenticated RCE

LuisMateo1/Arbitrary-File-Read-CVE-2024-24919

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

Fully automated PoC - CVE-2024-25641 - RCE - Cacti < v1.2.26 🌵

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

In an era where digital security is crucial, a new vulnerability in OpenSSH, identified as CVE-2024-6387, has drawn the attention of system administrators and security professionals worldwide. Named "regreSSHion," this severe security flaw allows remote code execution (RCE) and could significant threat to the integrity of vulnerable systems.

【Teedy 1.11】Account Takeover via XSS

D0rDa4aN919/CVE-2023-22809-Exploiter

Remotely Exploiting The Kernel Via IPv6

potential memory corruption vulnerabilities in IPv6 networks.

Windows TCP/IP IPv6(CVE-2024-38063)

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.

Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution

This exploit will attempt to execute system commands on SPIP targets.

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

Apache OFBiz CVE-2024-38856

Mass scanner for CVE-2024-36401

PoC for the CVE-2024 Litespeed Cache Privilege Escalation

Nuclei template to scan for Apache Ofbiz affecting versions before 18.12.15

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879

CVE-2024-25641 - RCE Automated Exploit - Cacti 1.2.26

CVE-2023-4220 Chamilo Exploit

CVE-2023-41425 - Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

zxybfq/CVE-2021-4034

PoC for CVE-2024-25641 Authenticated RCE on Cacti v1.2.26

patchpoint/CVE-2024-38063

sanan2004/CVE-2023-20198

Apache-HTTP-Server-2.4.50-RCE This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for educational purposes only and should be used responsibly on systems you have explicit permission to test.

Sudo Privilege Escalation: CVE-2023-22809 Simulation This project simulates the Sudo privilege escalation vulnerability (CVE-2023-22809) to demonstrate how unauthorized root access can be gained. It involves identifying and exploiting this vulnerability in a controlled environment using Parrot OS, the Sudo command, and Bash scripting.

CVE-2024-45265