Catálogo de exploits

client-side

DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE)

Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)

local

POC for exiftool vuln (CVE-2021-22204).

Solaris SunSSH 11.0 x86 - libpam Remote Root (2)

ch3rn0byl/CVE-2021-21551

Docker image that lets me study the exploitation of the VIM exploit

initial-access

Local Privilege Escalation is a way to take advantage of flaws in code or service administration that can manage regular or guest users for particular device activities or transfer root user privileges to master or client. User rights admin. The licenses or privileges may be violated by such undesired amendments, as the system may be disrupted by frequent users unless they have shell or root authorization. So, someone, someone, it may become dangerous and be used to obtain access to a higher level.

CVE-2019-14287

denial-of-service

RCE

denial-of-service

local

WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)

simple bash script for exploit CVE-2021-31166

local

Microsoft Exchange 2019 - Unauthenticated Email Download

denial-of-service

PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

denial-of-service

remote-with-credentials

IPFire 2.25 - Remote Code Execution (Authenticated)

Subrion CMS 4.2.1 - Arbitrary File Upload

IPFire 2.25 Core Update 156 and Prior pakfire.cgi Authenticated RCE

Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames

HTTP Protocol Stack CVE-2021-31166

Different rules to detect if CVE-2021-31166 is being exploited

Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free