Every new exploit,
on the radar.

Nmap .nse script to scan for CVE-2022-32073 in wolfssh

CVE-2021-33558 POC

ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit

This is a reference/POC for CVE-2021-43657

CVE-2017-9833 POC

perfex crm 1.10 is vulnerable to Stored Cross Site Scripting (XSS) via /clients/profile.

CVE-1999-1053 Proof-of-Concept Exploit

Operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3

Detects attempts at exploitation of CVE-2022-3602, a remote code execution vulnerability in OpenSSL v 3.0.0 through v.3.0.6

cve-2022-3602 poc

SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted fi…

DOM Based XSS

Detection and Mitigation script for CVE-2021-42717 -> ModSecurity DoS Vulnerability in JSON Parsing

CSRF allows to Add Network Traffic Control Type Rule

Men in the middle attack is possible through CSRF

CSRF attack leads to "Enable or Disable Ports" and to "Change port numbers

Denial of Service through CSRF

CSRF leads to change the password for "WLAN SSID"

ARBITAR FILE UPLOAD LEADS TO "delete every file for Denial of Service (using 'rm -rf *.*' in the code), reverse connection (using '.asp' webshell), backdoor , …

CSRF attack leads to Reset ONU to Factory Default

INFORMATION DISCLOSURE :CSRF to enable syslog mode and send to remote syslog server IP and Port.

cross-site request forgery (CSRF) attack on "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028".