jermainlaforce Goto Github PK

cve-2021-38647

CVE-2021-38647 - POC to exploit unauthenticated RCE #OMIGOD

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

cve-2021-40444

CVE-2021-40444 PoC

cve-2021-40444-sample

CVE-2021-40444 Sample

cve-2021-40444_builders

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

cve-2021-40445

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cve-2022-0847-dirtypipe-exploit

A root exploit for CVE-2022-0847 (Dirty Pipe)

cve-2022-1388-poc

An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell

cve-2022-20494

Exploit app for CVE-2022-20494, a high severity permanent denial-of-service vulnerability that leverages Android's DND (Do not disturb) feature

cve-2022-20699

Cisco Anyconnect VPN unauth RCE (rwx stack)

cve-2022-21449-tls-poc

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

cve-2022-21882

win32k LPE

cve-2022-22972

cve-2022-23808

phpMyAdmin XSS

cve-2022-26133

Atlassian Bitbucket Data Center反序列化漏洞(CVE-2022-26133)批量验证和利用脚本

cve-2022-26923_ad-certificate-services

The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services (AD CS) server role installed.

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

cve-2022-29464

WSO2 RCE (CVE-2022-29464) exploit and writeup.

cve-2022-29885

Apache Tomcat CVE-2022-29885

cve-2022-33891

「💥」CVE-2022-33891 - Apache Spark Command Injection

cve-2022-43684

CVE-2022-43684

cve-2022-47966

POC for CVE-2022-47966 affecting multiple ManageEngine products

cve-2023-0179-poc

针对（CVE-2023-0179）漏洞利用 该漏洞被分配为CVE-2023-0179，影响了从5.5到6.2-rc3的所有Linux版本，尽管该利用在6.1.6上被测试。 漏洞的细节和文章可以在os-security上找到。

cve-2023-2002

Linux Bluetooth - Run arbitrary management commands as an unprivileged user

cve-2023-20052

CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV

cve-2023-20110

PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

cve-2023-21839

Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)

cve-2023-2255

CVE-2023-2255 Libre Office

cve-2023-23192

CVE-2023-23192