Exploit catalog results

Showing 25 PoCs on this page

Metasploit

Log4Shell HTTP Header Injection

Metasploit exploitby Michael Schierl, plus 3 additional contributorsAdded to Metasploit 2021-12-29
Not analyzedCVE-2021-442281 file

exploit_multi/http/log4shell_header_injection · Ruby

Metasploit

Windows Unquoted Service Path Privilege Escalation

Metasploit exploitby h00dieAdded to Metasploit 2020-04-04
Not analyzedUnlinked1 file

exploit_windows/local/unquoted_service_path · Ruby

Metasploit

Bludit Directory Traversal Image File Upload Vulnerability

Metasploit exploitby christasaAdded to Metasploit 2019-11-05
Not analyzedCVE-2019-161131 file

exploit_linux/http/bludit_upload_images_exec · Ruby

Metasploit

Total.js CMS 12 Widget JavaScript Code Injection

Metasploit exploitby Riccardo KrauterAdded to Metasploit 2019-10-15
Not analyzedCVE-2019-159541 file

exploit_multi/http/totaljs_cms_widget_exec · Ruby

Metasploit

Generic Zip Slip Traversal Vulnerability

Metasploit exploitby Snyk, plus 1 additional contributorAdded to Metasploit 2019-09-09
Not analyzedUnlinked1 file

exploit_multi/fileformat/zip_slip · Ruby

Metasploit

Apache Tomcat CGIServlet enableCmdLineArguments Vulnerability

Metasploit exploitby Yakov ShafranovichAdded to Metasploit 2019-06-18
Not analyzedCVE-2019-02321 file

exploit_windows/http/tomcat_cgi_cmdlineargs · Ruby

Metasploit

Cisco Prime Infrastructure Runrshell Privilege Escalation

Metasploit exploitby Pedro Ribeiro <pedrib@gmail.com>Added to Metasploit 2019-06-10
Not analyzedCVE-2018-154391 file

exploit_linux/local/cpi_runrshell_priv_esc · Ruby

Metasploit

Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability

Metasploit exploitby Steven SeeleyAdded to Metasploit 2019-06-07
Not analyzedCVE-2019-18211 file

exploit_linux/http/cpi_tararchive_upload · Ruby

Metasploit

Oracle Application Testing Suite WebLogic Server Administration Console War Deployment

Metasploit exploitby Steven SeeleyAdded to Metasploit 2019-05-10
Not analyzedUnlinked1 file

exploit_windows/http/oats_weblogic_console · Ruby

Metasploit

Oracle Application Testing Suite Post-Auth DownloadServlet Directory Traversal

Metasploit auxiliary PoCby Steven SeeleyAdded to Metasploit 2019-05-07
Not analyzedCVE-2019-25571 file

auxiliary_gather/oats_downloadservlet_traversal · Ruby

Metasploit

Ruby On Rails DoubleTap Development Mode secret_key_base Vulnerability

Metasploit exploitby mpgn, plus 1 additional contributorAdded to Metasploit 2019-04-25
Not analyzedCVE-2019-54201 file

exploit_multi/http/rails_double_tap · Ruby

Metasploit

Axis Network Camera .srv-to-parhand RCE

Metasploit exploitby Brent Cook, plus 7 additional contributorsAdded to Metasploit 2018-07-12
Not analyzedCVE-2018-10660CVE-2018-10661CVE-2018-106621 file

exploit_linux/http/axis_srv_parhand_rce · Ruby

Metasploit

Ayukov NFTP FTP Client Buffer Overflow

Metasploit exploitby Berk Cem Goksel, plus 1 additional contributorAdded to Metasploit 2017-12-31
Not analyzedCVE-2017-152221 file

exploit_windows/ftp/ayukov_nftp · Ruby

Metasploit

Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution

Metasploit exploitby bcoles <bcoles@gmail.com>, plus 1 additional contributorAdded to Metasploit 2017-07-24
Not analyzedCVE-2017-74421 file

exploit_windows/fileformat/nitro_reader_jsapi · Ruby

Metasploit

Microsoft Office Word Malicious Hta Execution

Metasploit exploitby DidierStevens, plus 5 additional contributorsAdded to Metasploit 2017-04-15
Not analyzedCVE-2017-01991 file

exploit_windows/fileformat/office_word_hta · Ruby

Metasploit

Github Enterprise Default Session Secret And Deserialization Vulnerability

Metasploit exploitby iblue <iblue@exablue.de>Added to Metasploit 2017-03-23
Not analyzedCVE-2017-183651 file

exploit_linux/http/github_enterprise_secret · Ruby

Metasploit

Microsoft Office Word Malicious Macro Execution

Metasploit exploitAdded to Metasploit 2017-02-16
Not analyzedUnlinked1 file

exploit_multi/fileformat/office_word_macro · Ruby

Metasploit

Apache OpenOffice Text Document Malicious Macro Execution

Metasploit exploitAdded to Metasploit 2017-02-08
Not analyzedUnlinked1 file

exploit_multi/misc/openoffice_document_macro · Ruby

Metasploit

Advantech WebAccess 8.1 Post Authentication Credential Collector

Metasploit auxiliary PoCby h00dieAdded to Metasploit 2017-01-26
Not analyzedCVE-2016-58101 file

auxiliary_gather/advantech_webaccess_creds · Ruby

Metasploit

Cisco Firepower Management Console 6.0 Post Auth Report Download Directory Traversal

Metasploit auxiliary PoCby MattAdded to Metasploit 2017-01-09
Not analyzedCVE-2016-64351 file

auxiliary_scanner/http/cisco_firepower_download · Ruby

Metasploit

Cisco Firepower Management Console 6.0 Post Authentication UserAdd Vulnerability

Metasploit exploitby MattAdded to Metasploit 2017-01-06
Not analyzedCVE-2016-64331 file

exploit_linux/http/cisco_firepower_useradd · Ruby

Metasploit

Dell SonicWALL Scrutinizer 11.01 methodDetail SQL Injection

Metasploit exploitby bperryAdded to Metasploit 2016-05-12
Not analyzedCVE-2014-49771 file

exploit_multi/http/sonicwall_scrutinizer_methoddetail_sqli · Ruby

Metasploit

Advantech WebAccess Dashboard Viewer uploadImageCommon Arbitrary File Upload

Metasploit exploitby Zhou Yu <504137480@qq.com>, plus 1 additional contributorAdded to Metasploit 2016-04-17
Not analyzedCVE-2016-08541 file

exploit_windows/scada/advantech_webaccess_dashboard_file_upload · Ruby

Metasploit

MS15-134 Microsoft Windows Media Center MCL Information Disclosure

Metasploit auxiliary PoCby Francisco FalconAdded to Metasploit 2015-12-18
Not analyzedCVE-2015-61271 file

auxiliary_server/ms15_134_mcl_leak · Ruby

Metasploit

ManageEngine Desktop Central 9 FileUploadServlet ConnectionId Vulnerability

Metasploit exploitAdded to Metasploit 2015-12-14
Not analyzedCVE-2015-82491 file

exploit_windows/http/manageengine_connectionid_write · Ruby