Exploits from Github – Telegram

Exploits from Github

@github_exploits

563 subscribers

1 photo

662 files

3.6K links

https://t.me/PentestNotes

https://t.me/dbugs1337

Download Telegram

About

Blog

Apps

Platform

Exploits from Github

563 subscribers

Exploits from Github

CVE-2024-1709

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel

vulnerability, which may allow an attacker direct access to confidential information or

critical systems.

Github link:
https://github.com/AMRICHASFUCK/Mass-CVE-2024-1709

GitHub - AMRICHASFUCK/Mass-CVE-2024-1709: ScreenConnect AuthBypass Mass RCE

ScreenConnect AuthBypass Mass RCE. Contribute to AMRICHASFUCK/Mass-CVE-2024-1709 development by creating an account on GitHub.

13 views13:40

Exploits from Github

CVE-2010-2075

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.

Github link:
https://github.com/nwclasantha/unreal_ircd_3281_backdoor_and_mitigation

GitHub - nwclasantha/unreal_ircd_3281_backdoor_and_mitigation: The UnrealIRCd 3.2.8.1 Backdoor is associated with CVE-2010-2075…

The UnrealIRCd 3.2.8.1 Backdoor is associated with CVE-2010-2075, a well-known vulnerability that was introduced when the source code of the UnrealIRCd software was compromised. - nwclasantha/unrea...

11 views13:44

Exploits from Github

CVE-2024-30090

None

Github link:
https://github.com/Dor00tkit/CVE-2024-30090

GitHub - Dor00tkit/CVE-2024-30090: CVE-2024-30090 - LPE PoC

CVE-2024-30090 - LPE PoC. Contribute to Dor00tkit/CVE-2024-30090 development by creating an account on GitHub.

11 views13:44

Exploits from Github

CVE-2024-47176

None

Github link:
https://github.com/gianlu335/CUPS-CVE-2024-47176

GitHub - gianlu111/CUPS-CVE-2024-47176: A Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running…

A Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running the Common Unix Printing System (CUPS). - GitHub - gianlu111/CUPS-CVE-2024-47176: A Mass Scanner designed ...

11 views19:36

Exploits from Github

CVE-2023-38408

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Github link:
https://github.com/fazilbaig1/cve_2023_38408_scanner

GitHub - fazilbaig1/cve_2023_38408_scanner: Vulnerability Overview CVE-2023-38408 affects OpenSSH versions < 9.3p2 and stems from…

Vulnerability Overview CVE-2023-38408 affects OpenSSH versions < 9.3p2 and stems from improper validation of data when SSH agent forwarding is enabled. When users connect to a remote server ...

16 views19:36

Exploits from Github

CVE-2024-9234

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-9234

GitHub - RandomRobbieBF/CVE-2024-9234: GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload

GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload - RandomRobbieBF/CVE-2024-9234

10 views01:37

Exploits from Github

CVE-2024-48644

None

Github link:
https://github.com/rosembergpro/CVE-2024-48644

GitHub - rosembergpro/CVE-2024-48644: Reolink Duo 2 WiFi v1.0.280 - Account Enumeration Vulnerability

Reolink Duo 2 WiFi v1.0.280 - Account Enumeration Vulnerability - rosembergpro/CVE-2024-48644

12 views07:39

Exploits from Github

CVE-2024-46483

None

Github link:
https://github.com/kn32/cve-2024-46483

GitHub - kn32/cve-2024-46483: Pre-Authentication Heap Overflow in Xlight SFTP server <= 3.9.4.2

Pre-Authentication Heap Overflow in Xlight SFTP server <= 3.9.4.2 - kn32/cve-2024-46483

13 views13:41

Exploits from Github

CVE-2024-9593

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-9593

GitHub - RandomRobbieBF/CVE-2024-9593: Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution - RandomRobbieBF/CVE-2024-9593

10 views13:41

Exploits from Github

CVE-2024-9061

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-9061

GitHub - RandomRobbieBF/CVE-2024-9061: WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated…

WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add - RandomRobbieBF/CVE-2024-9061

9 views13:41

Exploits from Github

CVE-2020-35575

None

Github link:
https://github.com/dylvie/CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

GitHub - dylvie/CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure: password-disclosure issue in the web interface on certain…

password-disclosure issue in the web interface on certain TP-Link devices - dylvie/CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

8 views19:42

Exploits from Github

CVE-2024-9796

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-9796

GitHub - RandomRobbieBF/CVE-2024-9796: WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection

WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection - RandomRobbieBF/CVE-2024-9796

9 views19:43

Exploits from Github

CVE-2024-33231

None

Github link:
https://github.com/fdzdev/CVE-2024-33231

GitHub - fdzdev/CVE-2024-33231: XSS Vulnerability via File Upload in Ferozo Webmail Application

XSS Vulnerability via File Upload in Ferozo Webmail Application - fdzdev/CVE-2024-33231

9 views01:44

Exploits from Github

CVE-2020-28458

None

Github link:
https://github.com/fazilbaig1/CVE-2020-28458

GitHub - fazilbaig1/CVE-2020-28458: Affected versions of this package are vulnerable to Prototype Pollution.

Affected versions of this package are vulnerable to Prototype Pollution. - fazilbaig1/CVE-2020-28458

8 views13:37

Exploits from Github

CVE-2021-23383

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

Github link:
https://github.com/fazilbaig1/CVE-2021-23383

GitHub - fazilbaig1/CVE-2021-23383: The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain…

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source. - fazilbaig1/CVE-2021-23383

6 views13:37

Exploits from Github

CVE-2021-23369

None

Github link:
https://github.com/fazilbaig1/CVE-2021-23369

GitHub - fazilbaig1/CVE-2021-23369: Handlebars CVE-2021-23369 Vulnerability

Handlebars CVE-2021-23369 Vulnerability. Contribute to fazilbaig1/CVE-2021-23369 development by creating an account on GitHub.

7 views13:37

Exploits from Github

CVE-2019-19919

None

Github link:
https://github.com/fazilbaig1/CVE-2019-19919

GitHub - fazilbaig1/CVE-2019-19919: Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component…

Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability - fazilbaig1/CVE-2019-19919

9 views13:37

Exploits from Github

CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability

Github link:
https://github.com/l0n3m4n/CVE-2024-30088

GitHub - l0n3m4n/CVE-2024-30088: Windows Kernel Elevation of Privilege

Windows Kernel Elevation of Privilege . Contribute to l0n3m4n/CVE-2024-30088 development by creating an account on GitHub.

8 views13:38

Exploits from Github

CVE-2024-48652

None

Github link:
https://github.com/paragbagul111/CVE-2024-48652

GitHub - paragbagul111/CVE-2024-48652: Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute…

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field - paragbagul111/CVE-2024-48652

8 views13:38

Exploits from Github

CVE-2024-9466

None

Github link:
https://github.com/holypryx/CVE-2024-9466

GitHub - holypryx/CVE-2024-9466: CVE-2024-9466 poc

CVE-2024-9466 poc. Contribute to holypryx/CVE-2024-9466 development by creating an account on GitHub.

10 views13:38

Exploits from Github

CVE-2024-47176

None

Github link:
https://github.com/0x7556/CVE-2024-47176

GitHub - 0x7556/CVE-2024-47176: Unix CUPS打印系统远程代码执行漏洞

Unix CUPS打印系统远程代码执行漏洞. Contribute to 0x7556/CVE-2024-47176 development by creating an account on GitHub.

9 views13:38