Exploits

Exploit en Python diseñado para aprovechar la vulnerabilidad de elevación de privilegios CVE-2024-30085

Demonstrating the exploitation of the Remote Code Execution (RCE) vulnerability in Kemp LoadMaster (CVE-2024-1212). This project covers reconnaissance, vulnerability scanning using Nuclei, and exploitation processes, while also highlighting mitigation strategies to secure affected systems

CVE-2024-30085 (Alex Birnberg)

Blueimp's jQuery File Upload

CVE-2024-50623 POC - Cleo Unrestricted file upload and download

Can you exploit the EternalBlue vulnerability (CVE-2017-0144) on a Windows 7 system and retrieve the hidden flag? Your goal is to gain administrative privileges and locate the flag.txt file stored in the `C:\Windows\System32` directory.

cve-2024-CVE-2024-41713

HFS2.3未经身份验证的远程代码执行(CVE-2024-23692)

Check-Point安全网关任意文件读取漏洞(CVE-2024-24919)

Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)由于Mitel MiCollab软件的 NuPoint 统一消息 (NPM) 组件中存在身份验证绕过漏洞，并且输入验证不足，未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击，成功利用可能导致未授权访问、破坏或删除用户的数据和系统配置。影响范围：version < MiCollab 9.8 SP2 (9.8.2.12)

webmin or minisever RCE

CVE-2023-4966-exploit

🛠️ Exploit the CVE-2025-38352 vulnerability in the Android/Linux kernel with Chronomaly, designed for efficient use on vulnerable v5.10.x kernels.

将常用的cve工具做个备份(CVE-2021-42321,CVE-2022-23277,CVE-2022-41082,Exchange_GetVersion_MatchVul)

This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, including payload creation, chunked delivery, and seamless command execution.

Cleo Unrestricted file upload and download PoC (CVE-2024-50623)

Palo Alto Networks PAN-OS(CVE-2024-9474) POC

Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "set_sys_adm" function of the "adm.cgi" binary, and is due to improper santization of the user provided "newpass" field.