CVE-2021-3130

The repository describes an insufficiently protected credentials vulnerability in Open-AudIT up to version 3.5.3, where SSH secrets, Windows passwords, and SNMP strings are obfuscated via HTML password fields but can be revealed using browser developer tools. The writeup provides a clear technical description of the issue and references the vendor.

This repository contains a functional exploit for CVE-2021-3129, an unauthenticated RCE vulnerability in Laravel <8.4.2 when debug mode is enabled. The exploit leverages deserialization via PHPGGC to achieve remote command execution.