Awesome Exploit List

Awesome-Exploit

---

[Disclaimer] The technologies, ideas and tools involved in this warehouse are only for learning, and no one may use them for illegal purposes and profits, otherwise the consequences will be borne by themselves.

An exploit tool repository is not regularly updated for details of the corresponding vulnerabilities

Celery

• Airflow Celery message middleware command execution CVE-2020-11981
• Celery <4.0 Redis unauthorized access + Pickle deserialization exploit

ColdFusion

• Adobe ColdFusion Deserialization Vulnerability CVE-2017-3066

Couchdb

• Couchdb Arbitrary Command Execution Vulnerability CVE-2017-12636

Drupal

• Drupal Drupalgeddon 2 Remote Code Execution Vulnerability CVE-2018-7600
• Drupal Remote Code Execution Vulnerability CVE-2018-7602
• Drupal Remote Code Execution Vulnerability CVE-2019-6339
• Drupal XSS Vulnerability CVE-2019-6341

ECShop

• ECShop 2.x/3.x SQL Injection/Arbitrary Code Execution Vulnerability

Fastjson

• Fastjson 1.2.24 Deserialization Leads to Arbitrary Command Execution Vulnerability

Considerable

• Apache Flink Directory Traversal Vulnerability CVE-2020-17519

GhostScript

• GhostScript Sandbox Bypass (Command Execution) Vulnerability CVE-2018-16509
• GhostScript Sandbox Bypass (Command Execution) Vulnerability CVE-2018-19475
• GhostScript Sandbox Bypass (Command Execution) Vulnerability CVE-2019-6116

Gitlab

• GitLab Arbitrary File Read Vulnerability CVE-2016-9086
• GitLab Remote Command Execution Vulnerability CVE-2021-22205

GoAhead

• GoAhead Remote Command Execution Vulnerability CVE-2017-17562

H2 Database

• H2 Database Console unauthorized access

Hadoop

• Hadoop YARN ResourceManager unauthorized access

Jackson

• Jackson-databind deserialization vulnerability CVE-2017-7525 / CVE-2017-17485

Libssh

• Libssh server authentication bypass vulnerability CVE-2018-10933

Liferay

• Liferay Portal CE Deserialization Command Execution Vulnerability CVE-2020-7961

Magento

• Magento 2.2 SQL Injection Vulnerability

nacos

• Nacos Authentication Bypass Vulnerability CVE-2021-29441

Neo4j

• Neo4j Shell Server Deserialization Vulnerability CVE-2021-34371

Nginx

• Nginx out-of-bounds read cache vulnerability CVE-2017-7529

Notopng

• ntopng Permission Bypass Vulnerability CVE-2021-28073

The Exploit is a github repository by Threekiii

---