cve-2021-41773

Apache 2.4.49 - Path Traversal or Remote Code Execution cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-41773 If CGI-BIN is enabled...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 This repository contains a proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress plugin, leading to remote...

cve-2021-42013

Apache 2.4.50 - Path Traversal o Remote Code Execution CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Remote Code Execution en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para poner manos a la obra con CVE-2021-42013 Si...

CVE-2019-19781-CitrixRCE

Atacante de Ejecución Remota de Código no Autorizada en Citrix - CVE-2019-19781 Referencias: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ Evasión: 1 - Scripts eliminados/modificados en: /vpn/../vpns/portal/scripts/ 2 - Problemas de barra diagonal "/"...

CVE-2019-2729

CVE-2019-2729 Code d'exploitation pour CVE-2019-2729 Oracle Weblogic s'exécutant sur Windows. Peut créer un callback vers un listener CobaltStrike ou un handler Metasploit avec le payload windows/meterpreter/reversetcp Possède également un exploit non-beacon qui exécute simplement des commandes s...

CVE-2023-46805

العنوان: إثبات المفهوم لـ CVE-2023-46805 - للاستخدام التعليمي فقط الترخيص: هذا العمل مرخص بموجب رخصة المشاع الإبداعي الدولية 4.0 CC BY 4.0. يمكنك مشاركة هذا العمل ونسخه وتوزيعه ونقله بحرية، وتكييفه أو استخدامه لأغراض أخرى، بشرط نسبة التأليف بشكل مناسب. إخلاء مسؤولية: يتم توفير إثبات المفهوم PoC ه...

CVE-2021-34481

CVE-2021-34481 Vérifier le correctif pour CVE-2021-34481 Vulnérabilité d'exécution de code à distance du spouleur d'impression Windows https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481...

CVE-2022-47966-Scan

CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE simple poc...

CVE-2024-32002-hook

CVE-2024-32002-hook CVE-2024-32002-hook...

CVE-2022-35405

CVE-2022-35405 My blog post Nuclei template Other article ManageEngine PAM360 and Password Manager Pro unauthenticated remote code execution vulnerability PoC Access Manager Plus authenticated only :...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? root@kitploit: $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3...

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Exploit - Buffer Overflow Vulnerability This repository contains a Python script that exploits a buffer overflow vulnerability in the TOTOLINK AC1200 T8 version v4.1.5cu.861B20230220 in the setWiFiAclRules function via the desc parameter. Vulnerability Details...

cve-2023-46747

CVE-2023-46747 Exploit Script This script exploits the F5 BIG-IP TMUI remote code execution vulnerability CVE-2023-46747. It allows an unauthenticated attacker to execute arbitrary commands on a vulnerable F5 BIG-IP system. Table of Contents Features Requirements Usage Parameters How It Works...

CVE-2024-46377

CVE-2024-46377 PoC para la Vulnerabilidad de Carga de Archivos Arbitraria en Best House Rental Management System 1.0 Descripción general Este script de Python demuestra cómo explotar la vulnerabilidad de carga de archivos arbitraria en Best House Rental Management System 1.0. La vulnerabilidad...

SMB-LINUX-CVE-2025-37899

Vulnerabilidad Use-After-Free en ksmbd del Kernel de Linux CVE-2025-37899 Descripción Se ha descubierto una vulnerabilidad de tipo use-after-free en el módulo ksmbd del kernel de Linux, responsable de la implementación del protocolo SMB Server Message Block para el intercambio de archivos en red...

MultiExploit

Multi-Service Vulnerability Scanner Supported Vulnerabilities & Attack Vectors Microsoft SQL Server Vulnerabilities CVE-2023-21173 : Remote Code Execution in SQL Server 2022 Potential exploitation of: Weak authentication configurations Misconfigured server principals xpcmdshell abuse Advanced...

nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Some debug notes and exploit not blind Exploit Use burpsuite, modify ls / -al in the request. Note that double quotes will be replaced by single quotes. root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.14;...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell, and Auto-Export PCAP -- FOR EDUCATIONAL USE ONLY -- The author is not responsible or held liable for any actions taken with any aspect of this project/repository. I created this for the purposes of understanding the attack as well as writing detections within a...