Every new exploit,
on the radar.

The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.5.1.

CVE-2024-4439 PoC

WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block

aa

CVE-2024-4439 docker and poc

Proof of concept : CVE-2024-1071: WordPress Vulnerability Exploited

Ultimate Member Unauthorized Database Access / SQLi

CVE-2024-1071 with Docker

wp/ultimate-member - SQL Injection Vulnerability Exploit Script.

CVE-2024-1071

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

Windows HTTP协议栈远程代码执行漏洞 CVE-2021-31166

HTTP Protocol Stack CVE-2021-31166

PoC for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. Although it was defined as remote command execution, it can only cause the system …

PoC for CVE-2021-31166 and CVE-2022-21907

Exploit for MS Http Protocol Stack RCE vulnerability (CVE-2021-31166)

CVE-2021-31166: exploitation with Powershell, Python, Ruby, NMAP and Metasploit.

simple bash script for exploit CVE-2021-31166

Scans NTP servers for CVE-2013-5211 NTP DDOS amplification vulnerability.

PoC for distributed NTP reflection DoS (CVE-2013-5211)

NTP monlist scanner CVE-2013-5211

Exploit and check CVE-2013-5211

Local privilege escalation PoC for Linux kernel CVE-2022-1015

A write-up and LPE PoC of an OOB read and write vulnerability in the Linux Kernel.

Linux Kernel 1-Day Analysis & Exploitation

Traducción al español de los CVE-2022-1015 y 1016 descubiertos y documentados por David.

POC for CVE-2024-29973

Exploiter a Vulnerability detection and Exploitation tool for CVE-2024-29973 with Asychronous Performance.

PoC and Bulk Scanner for CVE-2024-29973

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR m…

[CVE-2020-6287] SAP NetWeaver AS JAVA (LM Configuration Wizard) Authentication Bypass (Create Simple & Administrator Java User)

sap netweaver portal add user administrator

Automated Exploit for CVE-2020-6287

Checker help to verify created account or find it's mandat

tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484是session持久化的洞，这个是sessi…

用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞

Remake of CVE-2020-9484 by Pentestical

Exploit for Apache Tomcat deserialization (CVE-2020-9484) which could lead to RCE

POC for CVE-2020-9484

CVE-2023-0297: The Story of Finding Pre-auth RCE in pyLoad

poc

RCE Unauth in PyLoad <0.5.0b3.dev31

New exploit for pyLoad v0.5.0 - Unauthenticated remote code excecution

RCE in pyload prior to 0.5.0b3.dev31.

警惕 一种针对红队的新型溯源手段!

PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.

Detects attempts and successful exploitation of CVE-2022-26809

Remote Code Execution Exploit in the RPC Library

The poc for CVE-2022-26809 RCE via RPC will be updated here.

This repository contains a PoC for remote code execution CVE-2022-26809

CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow

Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability

CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it.

CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerabili…

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879

Exploit for CVE-2024-4879 affecting Vancouver, Washington DC Now and Utah Platform releases

Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool…

ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!

A Scanner for CVE-2024-1709 - ConnectWise SecureConnect Authentication Bypass Vulnerability

Event ID 229 Rule Name SOC262 ScreenConnect Authentication Bypass Exploitation Detected (CVE-2024-1709)

Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit

POC script for CVE-2023-26035 (zoneminder 1.36.32)

ZoneMinder Snapshots - Unauthenticated

Exploit for CVE-2023-26035 affecting ZoneMinder < 1.36.33 and < 1.37.33

This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035.

CVE-2024-28955 Exploitation PoC

CVE-2024-28995 POC Vulnerability Scanner

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

Exploit for CVE-2024-28995

Exploit for CVE-2024-28995 affecting SolarWinds Serv-U 15.4.2 HF 1 and previous versions

CVE-2024-28995 PoC

CVE-2023-33733 reportlab RCE

This lab was set up to test CVE-2023-33733

This project aims at re-analyzing and PoC about CVE-2023-33733. Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF …

Reportlab Library - Remote Code Execution

CVE-2018-17456漏洞复现（PoC+Exp）

1-day

a test repository for CVE-2018-17456's PoC

Python script to generate a malicious MP4 file and start a CherryPy web server hosting a simple HTML page with the embedded file. Exploits another Stagefright…

PoC - Binary patches for CVE-2015-3864 (NOT for production, use at your own risk)

just some research notes

year 2 semester 1 Systems and Network Programming Assignment

A modification to fortra's CVE-2023-28252 exploit, compiled to exe

it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach

The repo contains a precompiled binary which can be run on a Windows machine vulnerable to CVE-2023-28252

Обнаружение эксплойта CVE-2023-28252

The TL;DR for the learnings of Windows Vulnerability CVE-2023-28252

Blueborne CVE-2017-1000251 PoC for linux machines

Linux Kernel < 4.13.1 - BlueTooth Buffer Overflow (PoC) BlueBorne - Proof of Concept - Unarmed/Unweaponized - DoS (Crash) only

clone

PoC exploit for CVE-2017-1000251 (modified)

POC and bulk scanner for CVE-2024-34470

A critical vulnerability has been found in HSC Mailinspector up to version 5.2.18. This vulnerability affects an unknown functionality of the file /public/load…

HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusion

CVE-2024-34470 : An Unauthenticated Path Traversal Vulnerability in HSC Mailinspector

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

Batch scanning site.

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、C…

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

Weblogic Upload Vuln(Need username password)-CVE-2019-2618

Weblogic Unrestricted File Upload

CVE-2019-2618-自己编写

自用验证

cve-2019-2618 需要用户名密码

Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.

GUI版 EXP

CENG 325 - Principles of Information Security And Privacy