freefv Goto Github PK

cve-2020-17144-exp

Exchange2010 authorized RCE

cve-2020-17518

cve-2020-17530

cve-2020-3956

PoC exploit for VMware Cloud Director RCE (CVE-2020-3956)

cve-2020-4463

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability (CVE-2020-4463)

cve-2020-5902

Proof of concept for CVE-2020-5902

cve-2020-5902-fofa-scan

cve-2020-5902-poc-exp

批量扫描CVE-2020-5902，远程代码执行，已测试

cve-2020-5902-scanner

Automated script for F5 BIG-IP scanner (CVE-2020-5902) using hosts retrieved from Shodan API.

cve-2020-5903

exploit code for F5-Big-IP (CVE-2020-5902)

cve-2020-5904

CVE-2020-5902 BIG-IP

cve-2020-6287-exploit

PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 This PoC only create user with unauthentication permission and no more administrator permission set. This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials of this project. Original finding: CVE-2020-6287: Pablo Artuso CVE-2020-6286: Yvan 'iggy' G. Usage: python sap-CVE-2020-6287-add-user.py <HTTP(s)://IP:Port

cve-2020-6308-mass-exploiter

CVE-2020-6308 mass exploiter/fuzzer.

cve-2020-8193

cve-2020-9484

POC - Apache Tomcat Deserialization Vulnerability (CVE-2020-9484)

cve-2021-21972

CVE-2021-21972

cve-2021-21972-vcenter-6.5-7.0-rce-poc

cve-2021-22005

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

cve-2021-22005-metasploit

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

cve-2021-26084_confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 命令回显+一键getshell

cve-2021-26086

Atlassian Jira Server/Data Center 8.4.0 - Arbitrary File read (CVE-2021-26086)

cve-2021-26295

CVE-2021-26295 EXP 可成功反弹Shell

cve-2021-26855

CVE-2021-26855 exp

cve-2021-30461

CVE-2021-30461

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-3156

cve-2021-38647

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

cve-2021-40346-poc

CVE-2021-40346 integer overflow enables http smuggling

cve-2021-41773

CVE-2021-41773 playground

cve-2021-42321

Microsoft Exchange Server Poc