Exploit catalog results

Showing 25 PoCs on this page

Metasploit

Delta Electronics InfraSuite Device Master Deserialization

Metasploit exploitby AnonymousAdded to Metasploit 2023-06-01
Not analyzedCVE-2023-11331 file

exploit_windows/misc/delta_electronics_infrasuite_deserialization · Ruby

Metasploit

Ivanti Avalanche FileStoreConfig File Upload

Metasploit exploitby Piotr BazydloAdded to Metasploit 2023-05-04
Not analyzedCVE-2023-281281 file

exploit_windows/http/ivanti_avalanche_filestoreconfig_upload · Ruby

Metasploit

Bitbucket Environment Variable RCE

Metasploit exploitby Ry0taK, plus 1 additional contributorAdded to Metasploit 2023-02-13
Not analyzedCVE-2022-437811 file

exploit_multi/http/bitbucket_env_var_rce · Ruby

Metasploit

Acronis TrueImage XPC Privilege Escalation

Metasploit exploitby Csaba FitzlAdded to Metasploit 2022-11-11
Not analyzedCVE-2020-257361 file

exploit_osx/local/acronis_trueimage_xpc_privesc · Ruby

Metasploit

Bitbucket Git Command Injection

Metasploit exploitby Jang, plus 2 additional contributorsAdded to Metasploit 2022-09-19
Not analyzedCVE-2022-368041 file

exploit_linux/http/bitbucket_git_cmd_injection · Ruby

Metasploit

Advantech iView NetworkServlet Command Injection

Metasploit exploitby rgod, plus 1 additional contributorAdded to Metasploit 2022-07-19
Not analyzedCVE-2022-21431 file

exploit_windows/http/advantech_iview_networkservlet_cmd_inject · Ruby

Metasploit

CVE-2022-21999 SpoolFool Privesc

Metasploit exploitby Oliver LyakAdded to Metasploit 2022-03-10
Not analyzedCVE-2022-21999CVE-2022-227181 file

exploit_windows/local/cve_2022_21999_spoolfool_privesc · Ruby

Metasploit

elFinder Archive Command Injection

Metasploit exploitby Thomas ChauchefoinAdded to Metasploit 2021-09-03
Not analyzedCVE-2021-326821 file

exploit_linux/http/elfinder_archive_cmd_injection · Ruby

Metasploit

Git LFS Clone Command Exec

Metasploit exploitby Johannes Schindelin, plus 1 additional contributorAdded to Metasploit 2021-08-12
Not analyzedCVE-2021-213001 file

exploit_multi/http/git_lfs_clone_command_exec · Ruby

Metasploit

Canon Driver Privilege Escalation

Metasploit exploitby Jacob BainesAdded to Metasploit 2021-08-05
Not analyzedCVE-2021-380851 file

exploit_windows/local/canon_driver_privesc · Ruby

Metasploit

Lexmark Driver Privilege Escalation

Metasploit exploitby Grant Willcox, plus 1 additional contributorAdded to Metasploit 2021-08-04
Not analyzedCVE-2021-354491 file

exploit_windows/local/lexmark_driver_privesc · Ruby

Metasploit

macOS Gatekeeper check bypass

Metasploit exploitby Cedric Owens, plus 4 additional contributorsAdded to Metasploit 2021-04-26
Not analyzedCVE-2021-30657CVE-2022-226161 file

exploit_osx/browser/osx_gatekeeper_bypass · Ruby

Metasploit

Jenkins CLI Deserialization

Metasploit exploitby SSD, plus 1 additional contributorAdded to Metasploit 2020-09-02
Not analyzedCVE-2017-10003531 file

exploit_linux/http/jenkins_cli_deserialization · Ruby

Metasploit

WebLogic Server Deserialization RCE BadAttributeValueExpException ExtComp

Metasploit exploitby Quynh Le, plus 2 additional contributorsAdded to Metasploit 2020-06-01
Not analyzedCVE-2020-28831 file

exploit_multi/misc/weblogic_deserialize_badattr_extcomp · Ruby

Metasploit

WebLogic Server Deserialization RCE - BadAttributeValueExpException

Metasploit exploitby Jang, plus 2 additional contributorsAdded to Metasploit 2020-05-04
Not analyzedCVE-2020-25551 file

exploit_multi/misc/weblogic_deserialize_badattrval · Ruby

Metasploit

Ricoh Driver Privilege Escalation

Metasploit exploitby Alexander Pudwill, plus 1 additional contributorAdded to Metasploit 2020-01-24
Not analyzedCVE-2019-193631 file

exploit_windows/local/ricoh_driver_privesc · Ruby

Metasploit

OpenMRS Java Deserialization RCE

Metasploit exploitby Nicolas Serra, plus 1 additional contributorAdded to Metasploit 2019-11-05
Not analyzedCVE-2018-192761 file

exploit_multi/http/openmrs_deserialization · Ruby

Metasploit

LibreNMS Collectd Command Injection

Metasploit exploitby Eldar MarcussenAdded to Metasploit 2019-08-12
Not analyzedCVE-2019-106691 file

exploit_linux/http/librenms_collectd_cmd_inject · Ruby

Metasploit

LibreOffice Macro Python Code Execution

Metasploit exploitby Gabriel Masei, plus 2 additional contributorsAdded to Metasploit 2019-07-30
Not analyzedCVE-2019-9848CVE-2019-98511 file

exploit_multi/fileformat/libreoffice_logo_exec · Ruby

Metasploit

WP Database Backup RCE

Metasploit exploitby Mikey Veenstra / WordfenceAdded to Metasploit 2019-06-20
Not analyzedCVE-2019-252241 file

exploit_multi/http/wp_db_backup_rce · Ruby

Metasploit

AppXSvc Hard Link Privilege Escalation

Metasploit exploitby James Forshaw, plus 1 additional contributorAdded to Metasploit 2019-06-06
Not analyzedCVE-2019-08411 file

exploit_windows/local/appxsvc_hard_link_privesc · Ruby

Metasploit

LibreNMS addhost Command Injection

Metasploit exploitby mhaskarAdded to Metasploit 2019-05-29
Not analyzedCVE-2018-204341 file

exploit_linux/http/librenms_addhost_cmd_inject · Ruby

Metasploit

LibreOffice Macro Code Execution

Metasploit exploitby Alex InführAdded to Metasploit 2019-04-12
Not analyzedCVE-2018-168581 file

exploit_multi/fileformat/libreoffice_macro_exec · Ruby

Metasploit

Dolibarr Gather Credentials via SQL Injection

Metasploit auxiliary PoCby Issam Rabhi, plus 1 additional contributorAdded to Metasploit 2018-09-20
Not analyzedCVE-2018-100941 file

auxiliary_gather/dolibarr_creds_sqli · Ruby

Metasploit

Pimcore Gather Credentials via SQL Injection

Metasploit auxiliary PoCby N. Rai-Ngoen, plus 1 additional contributorAdded to Metasploit 2018-09-19
Not analyzedCVE-2018-140581 file

auxiliary_gather/pimcore_creds_sqli · Ruby