5l1v3r1 / exploit-collection

Exploit Collection for popular applications

exploit-collection

Some critical exploits about popular applications.

Web Application

RCE(Remote Code Execution)

• CVE-2019-16759 : vBulletin 5.x - Pre-Auth Remote Command Execution

• CVE-2019-16662 : rConfig v3.9.2 unauthenticated Remote Code Execution

• CVE-2019-16278 : Nostromo httpd versions <= 1.9.6 Directory transversal to Remote Code Execution

• CVE-2019-11043 : nginx+PHP7 PHP-FPM Remote Code Execution

• CVE-2019-15107 : Webmin RCE <=1.920 unauthenticated Remote Code Execution

• CVE-2019-9670 : Zimbra Pre-Auth RCE on Zimbra from 8.5 to 8.7.11

Authentication Bypass

• CVE-2018-13382 : Fortinet SSL VPN Authentication Bypass on FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10

XXE(Xml External Entity)

• CVE-2019-14277 : Axway SecureTransport 5 Unauthenticated XML Injection / XXE

LFI/RFI/Path Traversal

(coming soon)

Sqli(Sql Injection) / NoSqli

(coming soon)

SSRF(Server Side Request Forgery)

(coming soon)

Host

RCE

• MS17-010(EternalBlue)

• CVE-2019-0708(BlueKeep)