CVE HUB 👾 – Telegram

CVE HUB 👾

789 subscribers

19.3K links

Github Red team resource push
Github 红队资源推送
Cve/Rce/Exploit/Redteam/漏洞利用/红队

Channel push 24/7 (real time)
频道全天候推送(实时)

Download Telegram

About

Blog

Apps

Platform

789 subscribers

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-31245
Github: https://github.com/ly1g3/Mailcow-CVE-2022-31245
Describe:
mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs.

GitHub - ly1g3/Mailcow-CVE-2022-31245: CVE-2022-31245: RCE and domain admin privilege escalation for Mailcow

CVE-2022-31245: RCE and domain admin privilege escalation for Mailcow - ly1g3/Mailcow-CVE-2022-31245

29 views06:36

👾KEYWORD SERVICE 🏷#rce
Name: 360tianqingRCE_-
Github: https://github.com/sobinge/360tianqingRCE_-

sobinge/360tianqingRCE_-

Contribute to sobinge/360tianqingRCE_- development by creating an account on GitHub.

28 views06:36

👾KEYWORD SERVICE 🏷#cnvd
Name: vulcat
Github: https://github.com/CLincat/vulcat

GitHub - CLincat/vulcat: vulcat可用于扫描Web端常见的CVE、CNVD等编号的漏洞，发现漏洞时会返回Payload信息。部分漏洞还支持命令行交互模式，可以持续利用漏洞

vulcat可用于扫描Web端常见的CVE、CNVD等编号的漏洞，发现漏洞时会返回Payload信息。部分漏洞还支持命令行交互模式，可以持续利用漏洞 - CLincat/vulcat

30 views06:40

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-35131
Github: https://github.com/ly1g3/Joplin-CVE-2022-35131
Describe:
**

GitHub - ly1g3/Joplin-CVE-2022-35131: Joplin CVE-2022-35131, RCE

Joplin CVE-2022-35131, RCE. Contribute to ly1g3/Joplin-CVE-2022-35131 development by creating an account on GitHub.

31 views06:44

👾KEYWORD SERVICE 🏷#exploit
Name: hacking-and-security-with-python-and-c-code-
Github: https://github.com/zedxpace/hacking-and-security-with-python-and-c-code-

GitHub - zedxpace/hacking-and-security-with-python-and-c-code-: This page will contain all the links to the script and exploits…

This page will contain all the links to the script and exploits built from scratch in python as well as c code. - GitHub - zedxpace/hacking-and-security-with-python-and-c-code-: This page will cont...

33 views06:44

👾KEYWORD SERVICE 🏷#exploit
Name: NVD-Exploit-List-Ja
Github: https://github.com/nomi-sec/NVD-Exploit-List-Ja

GitHub - nomi-sec/NVD-Exploit-List-Ja: 🔍NVD exploit & JVN(Japan Vulnerability Notes) easy description

🔍NVD exploit & JVN(Japan Vulnerability Notes) easy description - nomi-sec/NVD-Exploit-List-Ja

34 views06:52

👾KEYWORD SERVICE 🏷#redteam
Name: awesome-hacker-search-engines
Github: https://github.com/edoardottt/awesome-hacker-search-engines

GitHub - edoardottt/awesome-hacker-search-engines: A curated list of awesome search engines useful during Penetration testing,…

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more - edoardottt/awesome-hacker-search-engines

35 views06:59

👾KEYWORD SERVICE 🏷#webshell
Name: PHP-WebShell
Github: https://github.com/hyotwo/PHP-WebShell

hyotwo/PHP-WebShell

깃허브의 다양한 오픈소스 코드를 참고하여 오류없이 사용할 수 있도록 수정하였습니다. It has been modified so that it can be used without errors by referring to various open source codes on GitHub - hyotwo/PHP-WebShell

33 views07:18

👾KEYWORD SERVICE 🏷#exploit
Name: Defaced-Web-Pages
Github: https://github.com/scriptalad/Defaced-Web-Pages

GitHub - scriptalad/Defaced-Web-Pages: EH Assignment Post Exploitation

EH Assignment Post Exploitation. Contribute to scriptalad/Defaced-Web-Pages development by creating an account on GitHub.

30 views07:40

👾KEYWORD SERVICE 🏷#exploit
Name: scarftoolbox
Github: https://github.com/42cursus-youkim/scarftoolbox

GitHub - 42cursus-youkim/scarftoolbox: because exploiting goinfre is never enough

because exploiting goinfre is never enough. Contribute to 42cursus-youkim/scarftoolbox development by creating an account on GitHub.

33 views07:41

👾KEYWORD SERVICE 🏷#exploit
Name: rainfall
Github: https://github.com/mathias-mrsn/rainfall

GitHub - mathias-mrsn/rainfall: CTF based on binary files

CTF based on binary files. Contribute to mathias-mrsn/rainfall development by creating an account on GitHub.

32 views07:44

👾KEYWORD SERVICE 🏷#exploit
Name: Roblox-Speed-Hack
Github: https://github.com/alixjaffar/Roblox-Speed-Hack

GitHub - alixjaffar/Roblox-Speed-Hack: This is a exploit, which can boost your speed. To change your speed, you will have to change…

This is a exploit, which can boost your speed. To change your speed, you will have to change your .speed value. To actually get the speed boost you would need to press the letter "G&qu...

34 views07:52

👾KEYWORD SERVICE 🏷#exploit
Name: GuifHub
Github: https://github.com/Naithss/GuifHub

GitHub - Naithss/GuifHub: A roblox script exploit where you can use every popular script gui in game (Just starting so it only…

A roblox script exploit where you can use every popular script gui in game (Just starting so it only execute in 2 game which is Murder Mystery2 And Build A Boat) - GitHub - Naithss/GuifHub: A roblo...

38 views08:00

👾KEYWORD SERVICE 🏷#rce
Name: expressyouRcell
Github: https://github.com/LabTranslationalArchitectomics/expressyouRcell

GitHub - LabTranslationalArchitectomics/expressyouRcell: expressyouRcell generates animations of pictographic representations of…

expressyouRcell generates animations of pictographic representations of cells, or pictograms, providing a convenient and intuitive method for visualizing and understanding time course variations in...

43 views08:29

👾KEYWORD SERVICE 🏷#内存马
Name: ysoserial
Github: https://github.com/Y4er/ysoserial

GitHub - Y4er/ysoserial: ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。 - Y4er/ysoserial

39 views08:33

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-26809
Github: https://github.com/Ziggy78/CVE-2022-26809-RCE-POC
Describe:
Remote Procedure Call Runtime Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24492, CVE-2022-24528.

GitHub - Ziggy78/CVE-2022-26809-RCE-POC

Contribute to Ziggy78/CVE-2022-26809-RCE-POC development by creating an account on GitHub.

39 views09:00

👾KEYWORD SERVICE 🏷#exploit
Name: ioscrashhill_v1
Github: https://github.com/AliPunisher3/ioscrashhill_v1

GitHub - AliPunisher3/ioscrashhill_v1: a webkit exploit that allows to crash safari

a webkit exploit that allows to crash safari. Contribute to AliPunisher3/ioscrashhill_v1 development by creating an account on GitHub.

38 views09:15

👾KEYWORD SERVICE 🏷#exploit
Name: heap-viewer
Github: https://github.com/danigargu/heap-viewer

GitHub - danigargu/heap-viewer: IDA Pro plugin to examine the glibc heap, focused on exploit development

IDA Pro plugin to examine the glibc heap, focused on exploit development - danigargu/heap-viewer

39 views09:23

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-26138
Github: https://github.com/Daro1967/CVE-2022-26138-RCE
Describe:
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit this to log into Confluence and access all content accessible to users in the confluence-users group. This user account is created when installing versions 2.7.34, 2.7.35, and 3.0.2 of the app.

39 views09:34

👾KEYWORD SERVICE 🏷#redteam
Name: cf
Github: https://github.com/teamssix/cf

38 views09:41

👾KEYWORD SERVICE 🏷#exploit
Name: Fake-news-detection
Github: https://github.com/sazolborman/Fake-news-detection

GitHub - sazolborman/Fake-news-detection: Bangladesh is a country of youths. These youth are so involved with their virtual life.…

Bangladesh is a country of youths. These youth are so involved with their virtual life. They share all their emotions of love and hate, aggression and violence over these social media platforms. T...

38 views09:49