17 open source projects by mpgn

🔓 Padding oracle attack against PKCS7 🔓

RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl

🐩 Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 🐩

Spring Boot Actuator (jolokia) XXE/RCE

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻

🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE

Master CSI

Convert the loot directory of ntlmrelayx into an enum4linux like output

💀 Root-me Hall Of Fame dashboard 💀

RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer

CVE-2019-3799 - Spring Cloud Config Server: Directory Traversal < 2.1.2, 2.0.4, 1.4.6

CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13

💔 Hearbleed exploit to retrieve sensitive information CVE-2014-0160 💔