Exploits from Github – Telegram

Exploits from Github

@github_exploits

542 subscribers

1 photo

633 files

3.57K links

https://t.me/PentestNotes

https://t.me/dbugs1337

Download Telegram

About

Blog

Apps

Platform

Exploits from Github

542 subscribers

Exploits from Github

CVE-2019-11447

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)

Github link:
https://github.com/ojo5/CVE-2019-11447.c

GitHub - ojo5/CVE-2019-11447.c: CVE-2019-11447 written in C

CVE-2019-11447 written in C. Contribute to ojo5/CVE-2019-11447.c development by creating an account on GitHub.

11 views13:41

Exploits from Github

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Github link:
https://github.com/tiyeume25112004/CVE-2023-41425

GitHub - tiyeume25112004/CVE-2023-41425: Research

Research. Contribute to tiyeume25112004/CVE-2023-41425 development by creating an account on GitHub.

8 views01:43

Exploits from Github

CVE-2024-34351

None

Github link:
https://github.com/God4n/nextjs-CVE-2024-34351-_exploit

GitHub - God4n/nextjs-CVE-2024-34351-_exploit: PoC for a full exploitation of NextJS SSRF (CVE-2024-34351)

PoC for a full exploitation of NextJS SSRF (CVE-2024-34351) - God4n/nextjs-CVE-2024-34351-_exploit

7 views01:44

Exploits from Github

CVE-2024-38063

None

Github link:
https://github.com/Th3Tr1ckst3r/CVE-2024-38063

GitHub - Th3Tr1ckst3r/CVE-2024-38063: CVE-2024-38063 research so you don't have to.

CVE-2024-38063 research so you don't have to. Contribute to Th3Tr1ckst3r/CVE-2024-38063 development by creating an account on GitHub.

10 views07:45

Exploits from Github

CVE-2024-38473

None

Github link:
https://github.com/juanschallibaum/Prueba-Repo

10 views07:45

Exploits from Github

CVE-2024-38077

None

Github link:
https://github.com/Destiny0991/check_38077

GitHub - Destiny0991/check_38077: Windows远程桌面授权服务CVE-2024-38077检测工具

Windows远程桌面授权服务CVE-2024-38077检测工具. Contribute to Destiny0991/check_38077 development by creating an account on GitHub.

10 views13:47

Exploits from Github

CVE-2024-7928

None

Github link:
https://github.com/th3gokul/CVE-2024-7928

GitHub - th3gokul/CVE-2024-7928: CVE-2024-7928: FastAdmin < V1.3.4.20220530 Arbitrary File Reading Vulnerability

CVE-2024-7928: FastAdmin < V1.3.4.20220530 Arbitrary File Reading Vulnerability - th3gokul/CVE-2024-7928

8 views19:48

Exploits from Github

CVE-2024-21689

None

Github link:
https://github.com/salvadornakamura/CVE-2024-21689

GitHub - salvadornakamura/CVE-2024-21689: CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian POC

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian POC - salvadornakamura/CVE-2024-21689

10 views19:48

Exploits from Github

CVE-2024-28000

None

Github link:
https://github.com/realbotnet/CVE-2024-28000

11 views19:48

Exploits from Github

CVE-2024-41992

None

Github link:
https://github.com/fj016/CVE-2024-41992-PoC

GitHub - fj016/CVE-2024-41992-PoC: PoC for the CVE-2024-41992 (RCE on devices running WiFi-TestSuite-DUT)

PoC for the CVE-2024-41992 (RCE on devices running WiFi-TestSuite-DUT) - fj016/CVE-2024-41992-PoC

9 views01:50

Exploits from Github

CVE-2019-19470

None

Github link:
https://github.com/juliourena/CVE-2019-19470-RedTeamRD

GitHub - juliourena/CVE-2019-19470-RedTeamRD: Este repositorio contiene el código y las instrucciones para replicar el exploit…

Este repositorio contiene el código y las instrucciones para replicar el exploit CVE-2019-19470 descubierto por CODEWHITE. Aquí se encuentran el código fuente de los ejemplos que utilicé en el meet...

10 views01:50

Exploits from Github

CVE-2024-42845

None

Github link:
https://github.com/partywavesec/invesalius3_vulnerabilities

GitHub - partywavesec/invesalius3_vulnerabilities: InVesalius discovered CVE. CVE-2024-42845, CVE-2024-44825

InVesalius discovered CVE. CVE-2024-42845, CVE-2024-44825 - partywavesec/invesalius3_vulnerabilities

8 views01:51

Exploits from Github

CVE-2024-43035

None

Github link:
https://github.com/ZeroPathAI/Fonoster-LFI-PoC

GitHub - ZeroPathAI/Fonoster-LFI-PoC: Proof-of-concept exploit for Fonoster LFI vulnerability (CVE-2024-43035)

Proof-of-concept exploit for Fonoster LFI vulnerability (CVE-2024-43035) - ZeroPathAI/Fonoster-LFI-PoC

7 views01:51

Exploits from Github

CVE-2024-28000

None

Github link:
https://github.com/Alucard0x1/CVE-2024-28000

GitHub - Alucard0x1/CVE-2024-28000: LiteSpeed Cache Privilege Escalation PoC

LiteSpeed Cache Privilege Escalation PoC. Contribute to Alucard0x1/CVE-2024-28000 development by creating an account on GitHub.

9 views07:42

Exploits from Github

CVE-2024-4358

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

Github link:
https://github.com/fa-rrel/CVE-2024-4358

GitHub - gh-ost00/CVE-2024-4358: Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE…

Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 - gh-ost00/CVE-2024-4358

10 views13:44

Exploits from Github

CVE-2023-42793

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Github link:
https://github.com/FlojBoj/CVE-2023-42793

GitHub - FlojBoj/CVE-2023-42793: TeamCity CVE-2023-42793 RCE (Remote Code Execution)

TeamCity CVE-2023-42793 RCE (Remote Code Execution) - FlojBoj/CVE-2023-42793

9 views19:45

Exploits from Github

CVE-2024-28995

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

Github link:
https://github.com/gotr00t0day/CVE-2024-28995

GitHub - gotr00t0day/CVE-2024-28995: SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow…

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. - GitHub - gotr00t0day/CVE-2024-28995: SolarWinds Se...

9 views19:45

Exploits from Github

CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Github link:
https://github.com/thefizzyfish/CVE-2023-4220

GitHub - thefizzyfish/CVE-2023-4220: Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220

Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 - thefizzyfish/CVE-2023-4220

9 views19:46

Exploits from Github

CVE-2024-38063

None

Github link:
https://github.com/haroonawanofficial/CVE-2024-38063-Research-Tool

GitHub - haroonawanofficial/CVE-2024-38063-Research-Tool: This is a functional proof of concept (PoC) for CVE-2024-38063. However…

This is a functional proof of concept (PoC) for CVE-2024-38063. However, it's important to note that this CVE is theoretical and not exploitable in a real-world scenario. To enhance underst...

9 views19:46

Exploits from Github

CVE-2023-50564

None

Github link:
https://github.com/thefizzyfish/CVE-2023-50564-pluck

GitHub - thefizzyfish/CVE-2023-50564-pluck: CVE-2023-50564 - An arbitrary file upload vulnerability in the component /inc/mod…

CVE-2023-50564 - An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. ...

11 views01:47