Catálogo de exploits

Aruthw/CVE-2014-6271

qy1202/https-github.com-Ridter-CVE-2017-11882-

Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden iframe that redirects victims to Rig’s landing page, which includes an exploit for CVE-2018-8174 and shellcode. This enables remote code execution of the shellcode obfuscated in the landing page. After successful exploitation, a second-stage downloader is retrieved, which appears to be a variant of SmokeLoader due to the URL. It would then download the final payload, a Monero miner.

Exploitable target to CVE-2017-5638

stevenlinfeng/CVE-2018-2628

guwudoor/CVE-2018-8214

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Text Annotations. When setting the point attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process.

leandrocamposcardoso/CVE-2017-5638-Mass-Exploit

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

Cisco ASA - CVE-2018-0296 | Exploit

Test CVE-2018-0296 and extract usernames

Ektron Content Management System (CMS) 9.20 SP2, remote re-enabling users (CVE-2018–12596)

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.

CVE-2017-5792

MS15-034 HTTP.sys 远程执行代码检测脚本（MS15-034 HTTP.sys remote execution code poc script）

CVE-2016-2098 simple POC written in bash

malindarathnayake/Intel-CVE-2018-3639-Mitigation_RegistryUpdate

Shellshock vulnerability attacker

Demo-ing CVE-2017-1000253 in a container

Just a couple exploits for CVE-2018-11510

POC for CVE-2018-0824

MySQL 4.x/5.0 (Linux) - User-Defined Function (UDF) Dynamic Library (2) automation script.

empty_list - exploit for p0 issue 1564 (CVE-2018-4243) iOS 11.0 - 11.3.1 kernel r/w

CVE-2018-4878 flash 0day

A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.

teawater/CVE-2017-5123

CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7

Exploit for CVE-2018-10562

CVE-2018-4241: XNU kernel heap overflow due to bad bounds checking in MPTCP for iOS 11 - 11.3.1released by Ian Beer

cve-2018-2628 反弹shell