CVE-2022-22963
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Github link:
https://github.com/Shayz614/CVE-2022-22963
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Github link:
https://github.com/Shayz614/CVE-2022-22963
GitHub
GitHub - Shayz614/CVE-2022-22963: CVE to CTF FP
CVE to CTF FP. Contribute to Shayz614/CVE-2022-22963 development by creating an account on GitHub.
CVE-2021-43798
Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.
Github link:
https://github.com/wezoomagency/GrafXploit
Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.
Github link:
https://github.com/wezoomagency/GrafXploit
GitHub
GitHub - wezoomagency/GrafXploit: Automated Exploit Tool for Grafana CVE-2021-43798: Scanning common files that contain juicy informations…
Automated Exploit Tool for Grafana CVE-2021-43798: Scanning common files that contain juicy informations and extracting SSH keys from compromised users. - wezoomagency/GrafXploit
CVE-2023-45866
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.
Github link:
https://github.com/Danyw24/blueXploit
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.
Github link:
https://github.com/Danyw24/blueXploit
GitHub
GitHub - Danyw24/blueXploit: Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)
Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306) - Danyw24/blueXploit
CVE-2024-0582
A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Github link:
https://github.com/101010zyl/CVE-2024-0582
A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Github link:
https://github.com/101010zyl/CVE-2024-0582
GitHub
GitHub - 101010zyl/CVE-2024-0582-dataonly: A data-only attack based on CVE-2024-0582
A data-only attack based on CVE-2024-0582. Contribute to 101010zyl/CVE-2024-0582-dataonly development by creating an account on GitHub.
CVE-2021-42321
Microsoft Exchange Server Remote Code Execution Vulnerability
Github link:
https://github.com/gmeier909/exchange_tools
Microsoft Exchange Server Remote Code Execution Vulnerability
Github link:
https://github.com/gmeier909/exchange_tools
GitHub
GitHub - gmeier909/exchange_tools: exchange工具
exchange工具. Contribute to gmeier909/exchange_tools development by creating an account on GitHub.
CVE-2019-12725
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.
Github link:
https://github.com/YZS17/CVE-2019-12725
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.
Github link:
https://github.com/YZS17/CVE-2019-12725
GitHub
GitHub - YZS17/CVE-2019-12725: The EXP/POC of CVE-2019-12725
The EXP/POC of CVE-2019-12725. Contribute to YZS17/CVE-2019-12725 development by creating an account on GitHub.