WordPress File Upload插件任意文件读取漏洞（CVE-2024-9047）批量检测脚本

复现|漏洞|CVE|CNVD|POC|EXP|0day|1day|nday等相关微信文章收集

Gather and update all available and newest CVEs with their POC.

这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.

HFS2.3未经身份验证的远程代码执行(CVE-2024-23692)

Docassemble任意文件读取漏洞(CVE-2024-27292)

Check-Point安全网关任意文件读取漏洞(CVE-2024-24919)

TOTOLINK A6000R 命令执行漏洞（CVE-2024-41319）

TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006.

This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either unprotected or not present on the target server.

A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1

CVE-2024-32113 PoC

CVE-2024-49112 Windows LDAP RCE PoC and Metasploit Module

RCE through a race condition in Apache Tomcat

A PoC exploit for CVE-2024-10914 - D-Link Remote Code Execution (RCE)

一些漏洞的poc

CVE-2024-50623 POC - Cleo Unrestricted file upload and download

Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本

Productization efforts of CVE-2020-11179 Adreno-Qualcomm-GPU bug, original poc by Ben Hawkes of P0

Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)由于Mitel MiCollab软件的 NuPoint 统一消息 (NPM) 组件中存在身份验证绕过漏洞，并且输入验证不足，未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击，成功利用可能导致未授权访问、破坏或删除用户的数据和系统配置。影响范围：version < MiCollab 9.8 SP2 (9.8.2.12)

poc for CVE-2022-32981 under work

CVE-2024-35176 poc full

SPIP 4.30-alpha2、4.2.13、4.1.16之前的版本使用的porte_plume插件存在任意代码执行漏洞，远程未经身份验证的攻击者可以通过发送精心设计的HTTP 请求以SPIP用户身份执行任意PHP代码。

Bazaar v1.4.3 任意文件读取漏洞(CVE-2024-40348)

Yaml PoC rule for fscan.

PoC and reverse shell sample for CVE-2014-9390 (gitshock) vulnerability.

PoC exploit for CVE-2020-7247 OpenSMTPD 6.4.0 < 6.6.1 Remote Code Execution

Local Privilege Escalation via snapd (CVE-2019-7304) Remastered PoC exploit

f4T1H's PoC script for CVE-2021-3560 Polkit D-Bus Privilege Escalation

CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc python3, power by 【劦久信安】

a PoC of CVE-2021-36934 written in C++, EDR looking for ps1 execution? no problem! auto search of VSS using QueryDosDevice function

PoC and reverse shell sample for CVE-2014-9390 (gitshock) vulnerability.

PoC and reverse shell sample for CVE-2014-9390 (gitshock) vulnerability.

收集网上CVE-2018-0708的poc和exp(目前没有找到exp)

iOS 12 / OS X Remote Kernel Heap Overflow (CVE-2018-4407) POC

Exploit PoC for Spring RCE issue (CVE-2011-2894)

PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure

The "innocent" repo of the CVE-2018-11233 PoC

CVE-2017-1000117 PoC repository

CVE-2017-1000117 PoC repository

PoC CVE-2014-9390

PoC and reverse shell sample for CVE-2014-9390 (gitshock) vulnerability.