CVE-2019-0708-EXP-MSF-

CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Vulnerability exploit program for cve-2019-0708 MSF-Version muss 5.0.4 oder höher sein root@kitploit: mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/ mkdir -p...

POC_CVE-2025-14700

CVE-2025-14700 PoC für CVE-2025-14700 , eine Server-Side Template Injection SSTI-Schwachstelle in Crafty Controller = 4.6.1. Diese Schwachstelle ermöglicht es authentifizierten Benutzern, durch das Einschleusen bösartiger Jinja2-Vorlagen in die Webhook-Konfiguration Remote-Codeausführung RCE zu...

CVE-2024-11635

WordPress File Upload Questo README documenta una vulnerabilità divulgata esclusivamente per scopi educativi e difensivi.Non eseguire test su sistemi di produzione o sistemi di cui non sei proprietario o per i quali non hai esplicita autorizzazione. Scoperto da: abrahack Stato: Divulgazione...

CVE-2023-34040

CVE-2023-34040 स्प्रिंग काफ्का डिसीरियलाइज़ेशन रिमोट कोड एक्ज़ीक्यूशन root@kitploit: POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0....

CVE-2016-3238-PoC

CVE-2016-3238-PoC Whitepaper per la prova di concetto di CVE-2016-3238/MS16-087. CVE-2016-3238 consente agli aggressori man-in-the-middle di eseguire codice arbitrario fornendo un driver di stampa appositamente creato durante l'installazione della stampante, nota anche come "Windows Print Spooler...

SpringBreaker

SpringBreaker Exploit PoC per la vulnerabilità RCE di Spring CVE-2011-2894...

Online-Admission-System-RCE-PoC

Questo repository non contiene un README...

POC-CVE-2021-42013-EXPLOIT

-ff0055?style=for-the-badge&logo=python root@kitploit: 🔥 CVE-2021-42013 Exploit Framework di Makaveli 💀 Modalità Hacker Cosmico Multidimensionale attivata... Uno strumento avanzato di scansione, sfruttamento e interazione remota progettato per rilevare e sfruttare la vulnerabilità Apache Path...

Log4jCenter

Log4jCenter استغلال CVE-2021-44228 في vCenter لتنفيذ الأوامر عن بُعد والمزيد. مقالة المدونة التي تشرح الاستغلال موضحة أدناه: كيفية استغلال ثغرات Log4j في VMWare vCenter لماذا؟ إثباتات المفهوم لهذه الثغرة متناثرة ويجب تنفيذها يدويًا. يقوم هذا المستودع بأتمتة عملية الاستغلال ويعرض مسار هجوم إضافي...

CVE-2025-48148

CVE-2025-48148 StoreKeeper for WooCommerce = 14.4.4 - Upload Arbitrário de Arquivo Não Autenticado 🚀 StoreKeeper for WooCommerce = 14.4.4 - Exploit de Upload Arbitrário de Arquivo Não Autenticado 📝 Descrição O plugin StoreKeeper for WooCommerce para WordPress é vulnerável a uploads arbitrários de...

Log4jUnifi

Log4jUnifi Sfruttamento di CVE-2021-44228 nella Unifi Network Application per esecuzione remota di codice e altro. Another Log4j on the fire: Unifi Perché? Le prove di concetto per questa vulnerabilità sono sparse e devono essere eseguite manualmente. Questo repository automatizza il processo di...

CVE-2025-7441

CVE-2025-7441 StoryChief data - sizes - full फ़ील्ड किसी मनमाने URL की ओर इंगित करता है। StoryChief पर्याप्त फ़ाइल प्रकार/सामग्री सत्यापन नहीं करता है या URL स्रोत को प्रतिबंधित नहीं करता है, जिससे प्लगिन दूरस्थ संसाधन को लाकर साइट की अपलोड निर्देशिका में सहेज सकता है। निष्पादन योग्य कोड वाली...

CVE-2026-25512

CVE-2026-25512: Esecuzione di codice in remoto tramite iniezione di comandi nel gestore TNEF - Group-Office Vettore CVSS 4.0 : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Indice Riepilogo Versioni interessate Dettagli tecnici Causa principale Flusso dalla sorgente al sink...

CVE-2019-9202

CVE-2019-9202 Nagios IM 2.6 Exploit zur Remote-Code-Ausführung: CSRF + SQLi + RCE + LPE -- Remote-Root Beschreibung Durch die Verkettung einer Cross-Site-Request-Forgery CSRF / Autorisierungsumgehung CVE-2019-9203 ist es möglich, eine Union-basierte SQL-Injection CVE-2019-9204, eine...

CVE-2023-0297

CVE-2023-0297 Nicht authentifizierte Remote-Codeausführung in PyLoad 0.5.0b3.dev31 HAFTUNGSAUSSCHLUSS: Dieses Skript dient der Überprüfung der Systemsicherheit. Verwenden Sie dieses Skript nur auf Ihren eigenen Systemen oder auf Systemen, für die Sie eine schriftliche Erlaubnis zum Ausnutzen...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 o 6.0 - Exploit di Esecuzione Remota di Codice Per installare i requisiti esegui: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Ecco come usare l'exploit: root@kitploit: $...

CVE-2026-80104 DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skillupload in packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py takes file.filename as given and writes the request body to uploaddir / filename. A...

CVE-2026-80104

DB-GPT 0.8.0 is affected by a path traversal vulnerability in the skill_upload endpoint (in agentic_data_api.py). The function constructs the destination path using the multipart filename directly via the / operator without canonicalization or a containment check under the upload directory. An ab...

CVE-2025-55182-react2shell

react2shell CVE-2025-55182 Toolkit. Scanner + Exploit für unauthorisierte RCE in Next.js via RSC-Payload-Injection. Node.js Exploit: keine Abhängigkeiten. Bash-Scanner: prüft einzelne URLs oder Bulk-Listen. Exploit root@kitploit: Single command with output ./react2shell.mjs -t http://target:3000 ...

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: Kurzbeschreibung Apache Log4j2 2.0-beta9 bis 2.15.0 keine Releases 2.12.2, 2.12.3 und 2.3.1 JNDI-Funktionen, die in Konfiguration, Logmeldungen und Parametern verwendet werden, schützen nicht vor vom Angreifer kontrollierten LDAP- und anderen JNDI-bezogenen Endpunkten. E...