Catálogo de exploits

cve-2019-5420 POC simple ruby script

This is a repository for Apache HugeGraph Remote Code Execution vulnerability(CVE-2024-27348))

skrkcb2/CVE-2024-5452

0x7556/CVE-2024-55591

RogelioPumajulca/CVE-2022-0847

SSHEnum es una herramienta de enumeración de usuarios SSH basada en CVE-2018-15473. Permite detectar usuarios válidos aprovechando respuestas diferenciadas del servidor. Es rápida, compatible con Python 3.12 y soporta wordlists. Uso exclusivo para auditoría y pruebas de seguridad autorizadas.

pz-frontend-manager < 1.0.6 - CSRF Profile Picture Exploit

This repository contains a Proof-of-Concept (PoC) exploit for the Baron Samedit vulnerability (CVE-2021-3156). The exploit demonstrates privilege escalation on Ubuntu 20.04 with sudo version 1.8.31 and glibc version 2.31. It includes an assembly-based exploit, a shared object payload, and a Makefile for automated compilation.

Snizi/Moodle-CVE-2024-43425-Exploit

PoC of CVE-2022-30190

Cityworks deserialization of untrusted data vulnerability Detection

Python script for CVE-2024-0012 / CVE-2024-9474 exploit

Directory Traversal Exploit written in Bash for NVMS-1000 (CVE-2019-20085).

This is a Python script that exploits the CVE-2024-6624 vulnerability in the JSON API User <= 3.9.3 plugin for WordPress.

SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]

KGorbakon/CVE-2023-41425

Arthikw3b/RCE-CVE-2024-7954

cy3erdr4g0n/CVE-2024-10924

daikinitanda/-CVE-2024-47875-

CVE-2019-2215 poc for Huawei hardened kernel

qw3rtyou/CVE-2021-44228_dockernize

This script checks for devices vulnerable to the EternalBlue exploit (CVE-2017-0144) in a network using SMB.

Code to decrypt Huawei passwords CVE-2012-4960

In this challenge, I analyzed the Spring4Shell (CVE-2022-22965) vulnerability, investigated security bypasses, and wrote an Incident Postmortem Report detailing the detection, impact, and resolution of the attack. I also implemented a firewall rule in Python to block malicious requests and prevent future exploitation.

CVE-2017-8869 - MediaCoder 0.8.48.5888 - Local Buffer Overflow (SEH)

dorattias/CVE-2025-26319

CVE-2024-56901 - A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASManager web application with the version 6.1.1.0 or less that allows attackers to arbitrarily create Admin accounts via a crafted POST request.

This code is taken from "Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)" and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Drupal".

CVE-2024-56898 - Broken access control vulnerability in GeoVision GV-ASManager web application with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts.

rehan6658/CVE-2023-40028