🕵️
VeryLazyTech
📜 Medium🛒 My Shop👾 Github📩 Telegram 📺 YouTube✖ Twitter
  • 🕵️Welcome!
    • VeryLazyTech
    • Support VeryLazyTech
      • 👾 GitHub
      • 📜 Medium
      • ☕ My Shop
      • 📺 YouTube
      • ✖ Twitter
      • 📩 Telegram
  • 🛡️ Vulnerabilities and Exploits
    • CVE - POC
      • Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692
      • POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal
      • POC - CVE-2024-45241: Path Traversal in CentralSquare's CryWolf
      • Telerik Auth Bypass CVE-2024-4358
      • Check Point Security Gateways Information Disclosure - CVE-2024-24919
      • CVE-2024-23897 - Jenkins File Read Vulnerability
      • CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS
      • POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE)
      • CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary
      • CVE-2024-50623- Cleo Unrestricted file upload and download
      • POC - WordPress File Upload plugin, in the wfu_file_downloader.php file before version <= 4.24.11
      • POC - Remote and unauthenticated attacker can send crafted HTTP requests to RCE - cve-2025-3248
      • POC - CVE-2025–2539 File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File
      • POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution Vulnerability
  • 🕵️‍♂️Dorks
    • GitHub Dorks
    • Google Dork Online Tool
  • 📚 Resources
    • Top Hacking Books for 2024: FREE and Paid
    • How to Study for OSCP with the PWK Book PDF
    • Top 20 phishing tools to use in 2024
    • Top 8 Bug Bounty Books for 2025: Must-Reads for Ethical Hackers
    • Top Hacking Tools and Skills You Need to Learn in 2025
    • Offensive Cloud
    • Penetration Testing & Hacking Tools List
    • Top Cybersecurity Books by Topic
  • The Ultimate Penetration Testing Methodology (2025 Edition)
  • 🕸️Pentesting Web
    • Client Side Template Injection (CSTI)
    • Identify a Server’s Origin IP
    • 2FA/MFA/OTP Bypass
  • IDOR
  • Open Redirect
  • Subdomain Takeover
  • Penetration Testing WiFi Networks
  • Client-Side Path Traversal
  • Clickjacking
  • Command Injection
  • JWT Vulnerabilities
  • Bypass rating limit
  • CORS - Misconfigurations & Bypass
  • LDAP Injection
  • File upload vulnerabilities
  • Content Security Policy (CSP) bypass
  • Brute Force - Services, web, local, tools & wordlists
  • 🐧Linux
    • Practical Linux Commands
    • Bypassing Bash Restrictions - Rbash
    • Privilege escalation - Linux
  • Linux Environment Variables
  • 🪟Windows
    • Active Directory Methodology
    • Antivirus (AV) Bypass
  • 🌐Network Pentesting
    • FTP - Port 21
    • SSH- Port 22
    • Telnet - Port 23
    • SMTP/s - Port 25,465,587
    • WHOIS - Port 43
    • TACACS+ - Port 49
    • DNS - Port 53
    • TFTP/Bittorrent-tracker - Port 69/UDP
    • Finger - Port 79
    • Web - Port 80,443
    • Kerberos - Port 88
    • POP - Port 110/995
    • Portmapper - Port 111/TCP/UDP
    • Ident - Port 113
    • NTP - Port 123/UDP
    • MSRPC - Port 135, 539
    • NetBios - Port 137,138,139
    • SMB - Port 139 445
    • IMAP - Port 143, 993
    • SNMP - Ports 161, 162, 10161, and 10162/UDP
    • IRC - Ports 194,6667,6660-7000
    • Check Point Firewall - Port 264
    • LDAP - Ports 389, 636, 3268, 3269
    • IPsec/IKE VPN - Port 500/UDP
    • Modbus - Port 502
    • Rexec - Port 512
    • Rlogin - Port 513
    • Rsh - Port 514
    • Line Printer Daemon (LPD) - Port 515
    • Apple Filing Protocol (AFP) - PORT 548
    • RTSP - Port 554, 8554
    • IPMI - Port 623/UDP/TCP
    • Internet Printing Protocol (IPP) - Port 631
    • EPP - Port 700
    • Rsync - Port 873
    • Rusersd Service - Port 1026
    • Socks - Port 1080
    • Java RMI - RMI-IIOP - Port 1098/1099/1050
    • MSSQL (Microsoft SQL Server) - Port 1433
    • Oracle TNS Listener - Port 1521,1522-1529
  • PPTP - Port 1723
  • MQTT (Message Queuing Telemetry Transport) - Port 1883
  • Compaq HP Insight Manager - Port 2301, 2381
  • NFS Service - Port 2049
  • Docker - Port 2375,2376
  • Squid - Port 3128
  • iScsi - Port 3260
  • SAPRouter - Port 3299
  • 😎Post-exploitation
    • File Transfer Cheatsheet: Windows and Linux
  • 🧑‍🔧Technical guides
    • Kali Linux - Installation
Powered by GitBook
On this page
  • Latest Vulnerabilities & POCs
  • Level Up Your Cybersecurity Game

Was this helpful?

  1. 🛡️ Vulnerabilities and Exploits

CVE - POC

Your Lazy Guide to Exploits & Fixes!

Welcome to VeryLazyTech’s CVE - POC headquarters! Here, we break down the latest cybersecurity vulnerabilities and proofs of concept (POCs) so you don’t have to sweat the details. Explore exploits, grab resources from our shop, or join our crew to hack smarter, not harder.

Become a VeryLazyTech Member! 🎁 Unlock exclusive POC breakdowns, e-books, and discounts—because lazy wins.


Latest Vulnerabilities & POCs

Stay ahead of the game, the lazy way.

Dive into our curated list of CVEs and POCs—fresh exploits, dissected for your convenience. Want the full scoop? Members get detailed write-ups and mitigation tips!

  • Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 Remote code execution, no login needed. Lazy hackers rejoice!

  • POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path TraversalPOC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal Sneak into files without creds—proof included!

  • POC - CVE-2024-45241: Path Traversal in CentralSquare's CryWolfPOC - CVE-2024-45241: Path Traversal in CentralSquare's CryWolf Traversal made simple. Watch the paths unfold.

  • Telerik Auth Bypass CVE-2024-4358Telerik Report Server Authentication Bypass - CVE-2024-4358 Skip the login, see the reports. Too easy.

  • Check Point Security Gateways Information Disclosure - CVE-2024-24919Check Point Security Gateways Information Disclosure - CVE-2024-24919 Leaky gateways spilling secrets—peek inside.

  • CVE-2024-23897 - Jenkins File Read VulnerabilityCVE-2024-23897 - Jenkins File Read Vulnerability Read any file on Jenkins? Yep, it’s that bad.

  • CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NASCVE-2024–10914 - Command Injection Vulnerability in name parameter for D-Link NAS Inject commands via a sneaky parameter. Done.

  • POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE)POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) RCE in a JSON parser—lazy exploit heaven.

  • CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated ArbitraryCVE-2024-9935 - PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary Arbitrary access, no auth. PDF chaos awaits.

  • CVE-2024-50623- Cleo Unrestricted file upload and downloadCVE-2024-50623 - Cleo Unrestricted File Upload and Download Upload, download, no limits—wild west vibes.

  • POC - WordPress File Upload plugin, in the wfu_file_downloader.php file before version <= 4.24.11POC - WordPress File Upload plugin, in the wfu_file_downloader.php file before version <= 4.24.11 WordPress plugin flaw—file uploads gone rogue.

Want More Details? Join Now!


Level Up Your Cybersecurity Game

From exploits to expertise, we’ve got it all.

Visit Our Shop! 📚

Turn vulnerabilities into victories with our e-books and courses:

  • E-Books: “Exploiting CVEs Like a Pro” and more.

  • Courses: Master RCE, path traversal, and beyond—lazily. Browse the Shop Now

Follow Us On:

Catch the latest exploits and lazy-tech hacks:

  • ✖ Twitter: @VeryLazyTech – Real-time CVE drops.

  • 👾 GitHub: @VeryLazyTech – POC code to play with.

  • 📜 Medium: @VeryLazyTech – Deep CVE breakdowns.

  • 📺 YouTube: @VeryLazyTech – Watch us exploit live.

  • 📩 Telegram: @VeryLazyTech – Instant POC alerts.

  • 🕵️‍♂️ My Site: @VeryLazyTech – Your lazy-tech home.

Support Us! ☕

Fuel our CVE hunting with a coffee—or a whole pot! Every sip keeps the exploits coming. My Shop

PreviousSupport VeryLazyTechNextUnauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692

Last updated 2 months ago

Was this helpful?