{"id":13539270,"url":"https://github.com/rhinosecuritylabs/cves","last_synced_at":"2025-05-15T00:07:48.937Z","repository":{"id":45629330,"uuid":"162347061","full_name":"RhinoSecurityLabs/CVEs","owner":"RhinoSecurityLabs","description":"Proof-of-Concept exploits for CVEs found by the team at Rhino Security Labs","archived":false,"fork":false,"pushed_at":"2025-04-03T18:27:51.000Z","size":22662,"stargazers_count":839,"open_issues_count":1,"forks_count":245,"subscribers_count":39,"default_branch":"master","last_synced_at":"2025-04-13T21:33:59.174Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RhinoSecurityLabs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-12-18T21:25:50.000Z","updated_at":"2025-04-07T15:28:14.000Z","dependencies_parsed_at":"2024-01-07T05:58:39.558Z","dependency_job_id":"92f58948-a270-43e1-a7e3-a141feb185fe","html_url":"https://github.com/RhinoSecurityLabs/CVEs","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RhinoSecurityLabs%2FCVEs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RhinoSecurityLabs%2FCVEs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RhinoSecurityLabs%2FCVEs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RhinoSecurityLabs%2FCVEs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RhinoSecurityLabs","download_url":"https://codeload.github.com/RhinoSecurityLabs/CVEs/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254249197,"owners_count":22039029,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T09:01:22.702Z","updated_at":"2025-05-15T00:07:43.918Z","avatar_url":"https://github.com/RhinoSecurityLabs.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集","\u003ca id=\"683b645c2162a1fce5f24ac2abfa1973\"\u003e\u003c/a\u003e漏洞\u0026\u0026漏洞管理\u0026\u0026漏洞发现/挖掘\u0026\u0026漏洞开发\u0026\u0026漏洞利用\u0026\u0026Fuzzing"],"sub_categories":["\u003ca id=\"f799ff186643edfcf7ac1e94f08ba018\"\u003e\u003c/a\u003e知名漏洞\u0026\u0026CVE\u0026\u0026特定产品"],"readme":"# Rhino CVE Proof-of-Concept Exploits\nA collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.\n* [CVE-2024-55965: Denial of Service via Broken Access Control allowing “App Viewer” access to ‘Restart’ API request](CVE-2024-55965/)\n* [CVE-2024-55963: Unauthenticated Remote Code Execution as postgres user](CVE-2024-55963/)\n* [CVE-2024-46507: YETI platform SSTI](CVE-2024-46507/)\n* [CVE-2024-2449: Cross-Site Requets Forgery in Progress Kemp LoadMaster](CVE-2024-2449/)\n* [CVE-2024-2448: Authenticated Command Injection in Progress Kemp LoadMaster](CVE-2024-2448/)\n* [CVE-2024-2389: Progress Software Flowmon Unauthenticated Command Injection](CVE-2024-2389/)\n* [CVE-2024-23724: Ghost CMS Stored XSS Leading to Owner Takeover](CVE-2024-23724/)\n* [CVE-2024-1212: Unauthenticated Command Injection in Progress Kemp LoadMaster](CVE-2024-1212/)\n* [CVE-2023-47327: Silverpeas Core Space Create Function is vulnerable to Broken Access Control](CVE-2023-47327/)\n* [CVE-2023-47326: Silverpeas Core Domain Creation is vulnerable to CSRF](CVE-2023-47326/)\n* [CVE-2023-47325: Silverpeas Core Broken Access Control on the \"Bin\" Allows Modification of Deleted Spaces](CVE-2023-47325/)\n* [CVE-2023-47324: Silverpeas Core Stored XSS in Messages](CVE-2023-47324/)\n* [CVE-2023-47323: Silverpeas Core Broken Access Control Allows Reading All Messages](CVE-2023-47323/)\n* [CVE-2023-47322: Silverpeas Core CSRF Leading to Privilege Escalation](CVE-2023-47322/)\n* [CVE-2023-47321: Silverpeas Core Portlet Deployer Access via Broken Access Control](CVE-2023-47321/)\n* [CVE-2023-47320: Silverpeas Core Denial of Service via Broken Access Control](CVE-2023-47320/)\n* [CVE-2023-43121: Extreme Networks EXOS Unauthenticated File Read](CVE-2023-43121/)\n* [CVE-2023-43120: Extreme Networks EXOS Privilege Escalation from read-only User to Admin](CVE-2023-43120/)\n* [CVE-2023-43119: Extreme Networks EXOS Arbitrary File Write as Root](CVE-2023-43119/)\n* [CVE-2023-43118: Extreme Networks EXOS CSRF to RCE](CVE-2023-43118/)\n* [CVE-2022-25372: Local Privilege Escalation In Pritunl VPN Client](CVE-2022-25372/)\n* [CVE-2022-25237: Authorization Bypass Leading to RCE in Bonitasoft Web](CVE-2022-25237/)\n* [CVE-2022-25166: AWS VPN Client Arbitrary File Write as SYSTEM](CVE-2022-25166/)\n* [CVE-2022-25165: AWS VPN Client Information Disclosure Via UNC Path](CVE-2022-25165/)\n* [CVE-2021-38112: AWS WorkSpaces Remote Code Execution](CVE-2021-38112/)\n* [CVE-2020-5377 and CVE-2021-21514: Dell OpenManage Server Administrator Arbitrary File Read](CVE-2020-5377_CVE-2021-21514/)\n* [CVE-2020-13405: MicroWeber Unauthenticated User Database Disclosure](CVE-2020-13405/)\n* [CVE-2019-9926: LabKey Server CSRF](CVE-2019-9926/)\n* [CVE-2019-9758: LabKey Server Stored XSS](CVE-2019-9758/)\n* [CVE-2019-9757: LabKey Server XXE](CVE-2019-9757/)\n* [CVE‑2019‑5678: Command Injection in Nvidia GeForce Experience Web Helper](CVE-2019-5678/)\n* [CVE‑2019‑5674: NVIDIA GeForce Experience Arbitrary File Overwrites](CVE-2019-5674/)\n* [CVE-2019-3722: Dell EMC OpenManage Server Administrator (OMSA) XXE](CVE-2019-3722/)\n* [CVE‑2019‑16864: CompleteFTP Server Authenticated Remote Command Execution](CVE-2019-16864/)\n* [CVE‑2019‑16116: CompleteFTP Server Local Privilege Escalation ](CVE-2019-16116/)\n* [CVE-2019-0227: Apache Axis 1.4 Remote Code Execution](CVE-2019-0227/)\n* [CVE-2018-8024: Apache Spark XSS vulnerability in UI](CVE-2018-8024/)\n* [CVE-2018-5758: XXE in Jive-n](CVE-2018-5758/)\n* [CVE-2018-5757: RCE In AudioCodes 450HD Phone](CVE-2018-5757/)\n* [CVE-2018-20621: MEmu Android Emulator Local Privilege Escalation](CVE-2018-20621/)\n* [CVE-2018-1335: Command Injection in Apache Tika-server](CVE-2018-1335/)\n* [CVE-2018-1000110: User and Node Enumeration Through Jenkins Git Plugin \u003cv3.7](CVE-2018-1000110/)\n* [CVE-2017-7284: Unitrends Force Password Change Without Current Password](CVE-2017-7284/)\n* [CVE-2017-7283: Unitrends Enterprise Backup Solution RCE via Retore File](CVE-2017-7283/)\n* [CVE-2017-7282: Unitrends Enterprise Backup Solution LFI ](CVE-2017-7282/)\n* [CVE-2017-7281: Unitrends Enterprise Backup Solution RCE Via File Upload](CVE-2017-7281/)\n* [CVE-2017-7280: Unitrends Enterprise Backup Solution Command Execution](CVE-2017-7280/)\n* [CVE-2017-7279: Unitrends Enterprise Backup Server Privilege Escalation.](CVE-2017-7279/)\n* [CVE-2017-12861: Epson EasyMP Projector Bruteforce PIN](CVE-2017-12861/)\n* [CVE-2017-12860: Epson EasyMP Projector Hardcoded PIN](CVE-2017-12860/)\n* [CVE-2016-8972: IBM AIX Bellmail Local Root Exploit](CVE-2016-8972/)\n* [CVE-2016-6079: AIX lquerylv 5.3, 6.1, 7.1, 7.2 Local Root Exploit](CVE-2016-6079/)\n* [CVE-2016-3053: AIX lsmcode Local Root Exploit](CVE-2016-3053/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frhinosecuritylabs%2Fcves","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frhinosecuritylabs%2Fcves","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frhinosecuritylabs%2Fcves/lists"}