[POC] CVE-2024-53704 — CVE-2024-53704Feb 12, 2025
pocexploitCVE-2024-53704
demonstriert, wie mittels missbräuchlicher Nutzung eines Swap-Cookies eine VPN-Session übernommen werden kann. Wichtig: Dieses Projekt dient ausschliesslich zu Bildungs- und Forschungszwecken – bitte nur in Umgebungen verwenden, in denen Du explizit authorisiert bist.
Authenticated Remote Code Execution proof-of-concept for Extensis Portfolio Server CVE-2022-24251. Valid for version 4.0.1 or previous and bypasses the "fix" they implemented in 4.0.1.
SSHEnum es una herramienta de enumeración de usuarios SSH basada en CVE-2018-15473. Permite detectar usuarios válidos aprovechando respuestas diferenciadas del servidor. Es rápida, compatible con Python 3.12 y soporta wordlists. Uso exclusivo para auditoría y pruebas de seguridad autorizadas.
Python script for CVE-2024-0012 / CVE-2024-9474 exploit
SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]
This script checks for devices vulnerable to the EternalBlue exploit (CVE-2017-0144) in a network using SMB.
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
#PoC for CVE-2024-55591 Authentication bypass Affects: FortiOS 7.0.0 to 7.0.16 , FortiProxy 7.0.0 to 7.0.19 ,FortiProxy 7.2.0 to 7.2.12
A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability (CVE-2024-55591) in certain Fortinet devices.
Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282
A rewrite of the Polkit vulnerability.
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
This repository contains informaion about the Fortigate firewall vulnerability (CVE-2022-40684) and affected data that were publicly disclosed by the Belsen Group. This information is being shared for security research and defensive purposes to help organizations identify if they were impacted.
Private CVE-2024-55591
Exploit for CVE-2024-53704 - SonicWall SonicOS SSLVPN authentication bypass
Check Point Security Gateways RCE via CVE-2021-40438
Exploit for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways
Check Point Security Gateways RCE via CVE-2021-40438
Compiled CVE-2021-1732(WIndows XP-10(till 20H1) LPE)