Catálogo de exploits

Exploit for CVE-2024-4885

This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location "/main/inc/lib/javascript/bigupload/inc/bigUpload.php" in Chamilo LMS <= v1.11.24, and Attackers can obtain remote code execution via uploading of web shell.

Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

CosmicSting (CVE-2024-34102) POC / Patch Validator

RCE Chamilo 1.11.24

sysonlai/CVE-2024-32002-hook

YISF 2024 CTF-Web (Directory Traversal via ".tar" file, CVE-2007-4559), easy

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution

Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit

PoC - PHP CGI Argument Injection CVE-2024-4577 (Scanner and Exploit)

CVE-2024-4040 PoC

puckiestyle/CVE-2023-27532-RCE-Only

Vulnerability remediation and mitigationCVE-2024-6387

Exploiter a Vulnerability detection and Exploitation tool for GeoServer Unauthenticated Remote Code Execution CVE-2024-36401.

该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。

CVE-2024-37770

HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version 3.1.3.150324 + CVE-2021-36260 Detection

GNU IFUNC is the real culprit behind CVE-2024-3094

CVE-2024-39943 rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df (i.e., with execSync instead of spawnSync in child_process in Node.js).

SSH EXPLOIT BYPASS AUTH SSH

HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).

POC

imv7/CVE-2024-6387

TeamCity RCE for Linux (CVE-2023-42793)

Quick regreSSHion checker (based on software version) for nuclei CVE-2024-6387

xzx482/CVE-2024-1086

This repository investigates the exploitation of CVE-2023-34362 in the MOVEit file transfer server by the TA505 (Cl0p) ransomware group. It explores the group's tactics and past campaigns targeting file transfer applications, aiming to enhance understanding and defensive measures against such threats.