Catálogo de exploits

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

python3 POC for CVE-2019-2729 WebLogic Deserialization Vulnerability and CVE-2017-10271 amongst others

arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system

JBoss CVE-2017-12149 (Insecure Deserialization - RCE) Exploitation Lab.

alt3kx/CVE-2021-21985_PoC

Proof of Concept for CVE-2020-14295.

Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil_2_3.sys, installed by some DELL tools (BIOS updater, SupportAssist...)

Cacti v1.2.8 Unauthenticated Remote Code Execution

My notes for CVE-2004-1561 IceCast exploitation

ykg88/OHTS_IE6052-CVE-2020-17087

Multiple vulnerabilities in the vSphere Client (HTML5) were privately reported to VMware. Updates and workarounds are available to address these vulnerabilities in affected VMware products.

Detect vulns liferay CVE-2020-7961 by Nattroc (EOG Team)

POC-CVE-2020-7961-Token-iterate

qianniaoge/CVE-2020-14882_Exploit_Gui

DarkFlameMaster-bit/CVE-2018-8174_EXP

Exploit CVE-2017-9248 Telerik ReMix from Paul Taylor's script. Exploit Telerik lastest version fixed vuln. ReMix by TinoKa & Shaco JX

WordPress XXE vulnerability

bgsilvait/WIn-CVE-2021-31166

Qualcomm GPU / ARM Mali GPU

漏洞POC、EXP合集，持续更新。Apache Druid-任意文件读取（CVE-2021-36749）、ConfluenceRCE（CVE-2021-26084）、ZeroShell防火墙RCE（CVE-2019-12725）、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStudyRCE、ShowDoc任意文件上传、原创先锋后台未授权、Kyan账号密码泄露、TerraMasterTos任意文件读取、TamronOS-IPTV系统RCE、Wayos防火墙账号密码泄露

PoC of how to exploit a RCE vulnerability of the example DAGs in Apache Airflow <1.10.11

ch3rn0byl/CVE-2021-21551

tuo4n8/CVE-2020-2950

POC for exiftool vuln (CVE-2021-22204).

CVE-2019-14287

RCE

Docker image that lets me study the exploitation of the VIM exploit

Local Privilege Escalation is a way to take advantage of flaws in code or service administration that can manage regular or guest users for particular device activities or transfer root user privileges to master or client. User rights admin. The licenses or privileges may be violated by such undesired amendments, as the system may be disrupted by frequent users unless they have shell or root authorization. So, someone, someone, it may become dangerous and be used to obtain access to a higher level.

simple bash script for exploit CVE-2021-31166

Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames