
fuel-cms-cve-2018-16763-python3-port
Maintained Python 3 port of the original FUEL CMS CVE-2018-16763 proof-of-concept.

Maintained Python 3 port of the original FUEL CMS CVE-2018-16763 proof-of-concept.

CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit…

PoC exploit for CVE-2018-11736 affecting Pluck CMS versions prior to 4.7.7-dev2 with a File Upload Vulnerability

Remote privilege escalation exploit for CVE-2018-1049 targeting VyOS via SSH-based command injection in a sudo-permitted Perl script, granting root…

An exploitation framework for CVE-2018-19323 - GIGABYTE GDrv privilege escalation vulnerability with multi-architecture support and framework…

TP-Link TL-WR1043ND - Authenticated Remote Code Execution

CVE-2018-8639-EXP


Tool to exploit CVE-2018-13341 and recover hidden account password on Crestron devices

Aggressor Script to launch IE driveby for CVE-2018-15982.

PoC materials to exploit CVE-2018-6789


CVE-2018-16341 - Nuxeo Remote Code Execution without authentication using Server Side Template Injection

CVE-2018-20250-WINRAR-ACE Exploit with a UI

CVE-2018-11686 - FlexPaper PHP Publish Service RCE <= 2.3.6

Proof-of-concept exploit for CVE-2018-20162: sandbox escape in Digi TransPort LR54 LTE router via SIGINT handling flaw, yielding root shell access.

Crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network