strutser

strutser 此程序用于检测CVE-2017-5638漏洞。 使用方法 root@kitploit: Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP requests. default 1...

CVE-2026-20211 Cisco Identity Services Engine Remote Code Execution Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative credentials. This vulnerability is due to...

CVE-2026-20211

Cisco Identity Services Engine (ISE) is affected by a remote code execution vulnerability caused by insecure deserialization of Java objects . An authenticated attacker with high-privileged administrative credentials can send a crafted serialized Java object to gain user-level access to the under...

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT 仅供学习交流使用，请勿用于非法用途 RCE through a race condition in Apache Tomcat reference: https://github.com/iSee857/CVE-2024-50379-PoC Demo Usage root@kitploit: go run main.go -u http://localhost:8080/ Todo 漏洞利用成功的检测机制...

CVE-2026-89083 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2023-22621-POC

CVE-2023-22621-POC CVE-2023-22621：利用电子邮件模板实现 SSTI 到 RCE，影响 Strapi 版本 return strapi.config.get'plugin.email'; ; const send = async options = return strapi.plugin'email'.provider.sendoptions; ; / fill subject, text and html using lodash template @param object emailOptions - to, from and replyto...

EUVD-2026-81089

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

RevCAT

RevCAT OpenCATS 注意： 必须指向 OpenCATS 安装的根路径。 截图...

CVE-2019-9653

CVE-2019-9653 日付 開示: 2019年3月11日 最終更新: 2019年3月15日 概要 NUUO Inc. は、ビデオ中心の監視ソリューションを提供する企業です。さまざまな要件を持つ顧客向けに、多くのNVR（ネットワークビデオレコーダー）製品を展開しています。これらのNVRは、複数のカメラを管理できるLinux組み込み型のビデオ録画システムです。現在、世界中の多くの公共機関、企業、銀行、個人などで使用されています。...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI 漏洞升级为 RCE 测试环境：dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 在一次安全评估期间，发现了 CVE-2014-2383。本文档是一个概念验证，出于保护客户隐私的目的，不包含最初发现时的细节。不过，本文档中的内容确实模拟了该漏洞被利用时的环境。 发现 https://github.com/projectdiscovery/nuclei CVE-2014-2383 详情 root@kitploit: A vulnerability in dompdf.php in dompdf before...

running-CVE-2024-32002-locally-for-tesing

我们正在为此进行本地化适配 我们遵循这篇博客文章，但有一些关键区别 https://amalmurali.me/posts/git-rce 工作原理 1. 一个恶意仓库（gitrce）包含一个路径经过特殊构造的子模块。 2. 子模块路径使用大小写变体，利用了文件系统不区分大小写的特性。 3. 子模块包含一个指向其 .git/ 目录的符号链接，该目录中包含一个恶意钩子。 4. 当仓库被克隆时，符号链接被跟随，恶意钩子被执行，从而导致 RCE。 复现 ⚠️ 警告：不要在你未拥有或未获明确许可的系统上运行此 PoC。未经授权的测试可能导致意外后果。 我们需要为 Gitea 创建一个 API...

CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins

CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins CVE-2019-1003000 and CVE-2018-1999002 Pre-Auth RCE Jenkins...

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91105

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91104

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-73456

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised...