👾KEYWORD SERVICE 🏷#exploit
Name: web_exploitation_tests
Github: https://github.com/mousepad01/web_exploitation_tests

👾KEYWORD SERVICE 🏷#exploit
Name: exploitation_workbench
Github: https://github.com/mousepad01/exploitation_workbench

👾KEYWORD SERVICE 🏷#exploit
Name: exploit-train
Github: https://github.com/ginsama01/exploit-train

👾KEYWORD SERVICE 🏷#exploit
Name: CMSeeK
Github: https://github.com/Tuhinshubhra/CMSeeK

👾KEYWORD SERVICE 🏷#exploit
Name: audius-protocol-exploit
Github: https://github.com/trinhtan/audius-protocol-exploit

👾KEYWORD SERVICE 🏷#exploit
Name: IQA-of-JPEG-compressed-image
Github: https://github.com/MdAmirBaig/IQA-of-JPEG-compressed-image

👾KEYWORD SERVICE 🏷#exploit
Name: Discord-Image-Exploit
Github: https://github.com/TheonlyIcebear/Discord-Image-Exploit

👾KEYWORD SERVICE 🏷#webshell
Name: HMagicShell
Github: https://github.com/dybb8999/HMagicShell

👾KEYWORD SERVICE 🏷#exploit
Name: exploit-scripts
Github: https://github.com/heywhyyoulookinghere/exploit-scripts

👾KEYWORD SERVICE 🏷#rce
Name: ViceCity-Server-RCE-Exploit
Github: https://github.com/hertanion/ViceCity-Server-RCE-Exploit

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-20224
Github: https://github.com/ShaikUsaf/system_bt_AOSP10_r33_CVE-2022-20224
Describe:
In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220732646

👾KEYWORD SERVICE 🏷#红队
Name: 45_8307
Github: https://github.com/wwwuuid2com28/45_8307

👾KEYWORD SERVICE 🏷#rce
Name: RCERM_ECCV22
Github: https://github.com/ukdsvl/RCERM_ECCV22

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-20229
Github: https://github.com/ShaikUsaf/system_bt_AOSP10_r33_CVE-2022-20229
Describe:
In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224536184

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-20223
Github: https://github.com/nidhi7598/packages_apps_Settings_AOSP_10_r33_CVE-2022-20223
Describe:
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-223578534

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-29247
Github: https://github.com/a1ise/CVE-2022-29247
Describe:
Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 allows a renderer with JS execution to obtain access to a new renderer process with `nodeIntegrationInSubFrames` enabled which in turn allows effective access to `ipcRenderer`. The `nodeIntegrationInSubFrames` option does not implicitly grant Node.js access. Rather, it depends on the existing sandbox setting. If an application is sandboxed, then `nodeIntegrationInSubFrames` just gives access to the sandboxed renderer APIs, which include `ipcRenderer`. If the application then additionally exposes IPC messages without IPC `senderFrame` validation that perform privileged actions or return confidential data this access to `ipcRenderer` can in turn compromise your application / user even with the sandbox enabled. Electron versions 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 contain a fix for this issue. As a workaround, ensure that all IPC message handlers appropriately validate `senderFrame`.

👾KEYWORD SERVICE 🏷#rce
Name: canvas-rce-api
Github: https://github.com/instructure/canvas-rce-api

👾KEYWORD SERVICE 🏷#exploit
Name: exploit-dev
Github: https://github.com/vp777/exploit-dev

👾KEYWORD SERVICE 🏷#exploit
Name: exploit321
Github: https://github.com/exploit321/exploit321

👾KEYWORD SERVICE 🏷#exploit
Name: OSED
Github: https://github.com/nop-tech/OSED

👾KEYWORD SERVICE 🏷#exploit
Name: DockerRunCommand
Github: https://github.com/KentonMcDaniel/DockerRunCommand