Exploit catalog results

Showing 15 PoCs on this page

Metasploit

ManageEngine ADManager Plus ChangePasswordAction Authenticated Command Injection

Metasploit exploitby Dinh Hoang, plus 1 additional contributorAdded to Metasploit 2023-06-02
Not analyzedCVE-2023-290841 file

exploit_windows/http/manageengine_admanager_plus_cve_2023_29084_auth_cmd_injection · Ruby

Metasploit

Oracle Weblogic PreAuth Remote Command Execution via ForeignOpaqueReference IIOP Deserialization

Metasploit exploitby 14m3ta7k, plus 1 additional contributorAdded to Metasploit 2023-05-24
Not analyzedCVE-2023-218391 file

exploit_multi/iiop/cve_2023_21839_weblogic_rce · Ruby

Metasploit

Microsoft Exchange Server ChainedSerializationBinder RCE

Metasploit exploitby Markus Wulftange, plus 7 additional contributorsAdded to Metasploit 2022-08-09
Not analyzedCVE-2021-42321CVE-2022-232771 file

exploit_windows/http/exchange_chainedserializationbinder_rce · Ruby

Metasploit

Zoho Password Manager Pro XML-RPC Java Deserialization

Metasploit exploitby Vinicius, plus 1 additional contributorAdded to Metasploit 2022-08-02
Not analyzedCVE-2022-354051 file

exploit_windows/http/zoho_password_manager_pro_xml_rpc_rce · Ruby

Metasploit

User Profile Arbitrary Junction Creation Local Privilege Elevation

Metasploit exploitby KLINIX5Added to Metasploit 2022-03-21
Not analyzedCVE-2022-269041 file

exploit_windows/local/cve_2022_26904_superprofile · Ruby

Metasploit

Win32k NtGdiResetDC Use After Free Local Privilege Elevation

Metasploit exploitby Boris Larin, plus 5 additional contributorsAdded to Metasploit 2021-11-09
Not analyzedCVE-2021-404491 file

exploit_windows/local/cve_2021_40449 · Ruby

Metasploit

Netgear PNPX_GetShareFolderList Authentication Bypass

Metasploit auxiliary PoCby UnknownAdded to Metasploit 2021-09-16
Not analyzedCVE-2021-455111 file

auxiliary_admin/http/netgear_pnpx_getsharefolderlist_auth_bypass · Ruby

Metasploit

Linux eBPF ALU32 32-bit Invalid Bounds Tracking LPE

Metasploit exploitby Manfred Paul, plus 1 additional contributorAdded to Metasploit 2021-08-17
Not analyzedCVE-2020-8835CVE-2021-34901 file

exploit_linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe · Ruby

Metasploit

Lexmark Driver Privilege Escalation

Metasploit exploitby Jacob Baines, plus 1 additional contributorAdded to Metasploit 2021-08-04
Not analyzedCVE-2021-354491 file

exploit_windows/local/lexmark_driver_privesc · Ruby

Metasploit

Atlassian Crowd pdkinstall Unauthenticated Plugin Upload RCE

Metasploit exploitby Corben Leo, plus 1 additional contributorAdded to Metasploit 2021-07-30
Not analyzedCVE-2019-115801 file

exploit_multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce · Ruby

Metasploit

IPFire 2.25 Core Update 156 and Prior pakfire.cgi Authenticated RCE

Metasploit exploitby Mücahit Saratar <trregen222@gmail.com>Added to Metasploit 2021-06-10
Not analyzedCVE-2021-333931 file

exploit_linux/http/ipfire_pakfire_exec · Ruby

Metasploit

VMware View Planner Unauthenticated Log File Upload RCE

Metasploit exploitby Mikhail Klyuchnikov, plus 1 additional contributorAdded to Metasploit 2021-03-14
Not analyzedCVE-2021-219781 file

exploit_linux/http/vmware_view_planner_4_6_uploadlog_rce · Ruby

Metasploit

HPE Systems Insight Manager AMF Deserialization RCE

Metasploit exploitby Harrison Neal, plus 1 additional contributorAdded to Metasploit 2021-03-02
Not analyzedCVE-2020-72001 file

exploit_windows/http/hpe_sim_76_amf_deserialization · Ruby

Metasploit

CVE-2020-1170 Cloud Filter Arbitrary File Creation EOP

Metasploit exploitby James ForeshawAdded to Metasploit 2021-01-04
Not analyzedCVE-2020-171361 file

exploit_windows/local/cve_2020_17136 · Ruby

Metasploit

Microsoft Windows NtUserMNDragOver Local Privilege Elevation

Metasploit exploitby Clément Lecigne, plus 1 additional contributorAdded to Metasploit 2020-04-30
Not analyzedCVE-2019-08081 file

exploit_windows/local/ntusermndragover · Ruby