admin/0day
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
0day/00-CVE_EXP
History
helloexp 870fc971fa 优化 CVE-2022-22947 exp
2022-03-04 16:23:59 +08:00
..
CVE-2012-0053
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2014-0160--OpenSSL心脏滴血漏洞
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2015-1635
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2017-11882
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2017-16995 Ubuntu 16.04 本地提权漏洞
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2017-17215
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2018-2628 weblogic 反序列化漏洞
优化目录
2022-03-01 10:29:38 +08:00
CVE-2018-2628-master
add 安全产品漏洞
2022-01-20 14:43:11 +08:00
CVE-2018-5711-hanging-websites-by-a-harmful-gif
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2019-0623
add several 2019 cve
2022-03-01 16:58:42 +08:00
CVE-2019-0708--能够使用exp
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2019-0803
add several 2019 cve
2022-03-01 16:58:42 +08:00
CVE-2019-0808
add several 2019 cve
2022-03-01 16:58:42 +08:00
CVE-2019-1096
add 安全产品漏洞
2022-01-20 14:43:11 +08:00
CVE-2019-1132
add several 2019 cve
2022-03-01 16:58:42 +08:00
CVE-2019-1388
add several 2019 cve
2022-03-01 16:58:42 +08:00
CVE-2019-1458
add several 2019 cve
2022-03-01 16:58:42 +08:00
CVE-2019-2618 弱口令&任意文件上传漏洞
优化目录
2022-03-01 10:29:38 +08:00
CVE-2019-9730
add 安全产品漏洞
2022-01-20 14:43:11 +08:00
CVE-2019-10758--Mongo expres rce
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2019-13272
add CVE-2019-13272
2022-02-24 17:36:58 +08:00
CVE-2019-18634
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2020-0668
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-0683
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-0787
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-0796
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-1015
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-1034
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-1054
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-1066
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-1313
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-1337
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-1472
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-2551
add 安全产品漏洞
2022-01-20 14:43:11 +08:00
CVE-2020-9273
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2020-14882 weblogic RCE 漏洞
优化目录
2022-03-01 10:29:38 +08:00
CVE-2020-14883 未授权访问
优化目录
2022-03-01 10:29:38 +08:00
CVE-2020-16040
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2020-16898
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-16938
add several 2020 cve
2022-03-01 16:58:13 +08:00
CVE-2020-28018
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2021-1732
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-3156
add 安全产品漏洞
2022-01-20 14:43:11 +08:00
CVE-2021-3156_one_shot
update cve exp
2022-01-13 17:57:04 +08:00
CVE-2021-3157
add 安全产品漏洞
2022-01-20 14:43:11 +08:00
CVE-2021-26868
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-33739
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-34486
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-36934
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-40444
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-40449
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-42278
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2021-42287
add several 2021 cve
2022-03-01 16:56:58 +08:00
CVE-2022-21999
add CVE-2022-21999 exp
2022-02-10 12:02:50 +08:00
CVE-2022-22947
优化 CVE-2022-22947 exp
2022-03-04 16:23:59 +08:00
CVE-2022-23131
update README.md
2022-03-03 15:15:40 +08:00
Exim
update cve exp
2022-01-13 17:57:04 +08:00
jad_1.5.8e_oob_write
update cve exp
2022-01-13 17:57:04 +08:00
Java_Debug_Wire_Potocol_remote_code
update cve exp
2022-01-13 17:57:04 +08:00
Memcrashed-DDoS-Exploit
update cve exp
2022-01-13 17:57:04 +08:00
WebLogic Server 14.1.1.0.0 本地文件包含
优化目录
2022-03-01 10:29:38 +08:00
README.md
update cve exp
2022-01-13 17:57:04 +08:00

README.md

CVE Exploit PoC's

PoC exploits for multiple software vulnerabilities.

Current exploits

  • CVE-2019-18634 (LPE): Stack-based buffer overflow in sudo tgetpass.c when pwfeedback module is enabled
  • CVE-2021-3156 (LPE): Heap-based buffer overflow in sudo sudoers.c when an argv ends with backslash character.
  • CVE-2020-28018 (RCE): Exim Use-After-Free (UAF) in tls-openssl.c leading to Remote Code Execution
  • CVE-2020-9273 (RCE): ProFTPd Use-After-Free (UAF) leading to Post-Auth Remote Code Execution
  • jad OOB write (CE): JAD out-of-bounds write leading to code execution (No CVE given yet)