269343 matches found
CVE-2018-12613
CVE-2018-12613 Bug di inclusione locale di file dovuto al bypass del filtro utilizzando il carattere %253f. Software interessato 1. PHPMyAdmin v.4.8.0 2. PHPMyAdmin v.4.8.1 Come usare Questo script PowerShell necessita di tre parametri per creare una richiesta HTTP di exploit: root@kitploit: 1...
CVE-2017-5638
CVE-2017-5638 | Struts s2-045 Descrição É possível realizar um ataque RCE com um valor malicioso de Content-Type. Se o valor de Content-Type não for válido, uma exceção é lançada, que é então usada para exibir uma mensagem de erro para um usuário. Versões afetadas Struts 2.3.5 Struts 2.3.31 Strut...
Exploiting-a-vulnerability-using-reverse-shell
Information Security Fundamentals — Progetto Primavera 2026 Punti Totali: 20 | Scadenza: Non sono accettate consegne in ritardo Panoramica Questo progetto simula uno scenario reale di attacco e difesa su due macchine virtuali. Sfrutterete una vulnerabilità critica di RCE pre-autenticazione...
CVE-2020-2883
Was ist das? Dieses Projekt, das auf weblogiccmd basiert, ist ein PoC für CVE-2020-2883. Zwei Gadgets Erstes: root@kitploit: ObjectInputStream.readObject PriorityQueue.readObject PriorityQueue.heapify PriorityQueue.siftDown siftDownUsingComparator...
CVE-2021-44228
Análise do CVE-2021-44228 Como funciona? Abaixo está um processo detalhado de um caso de injeção remota explorando a vulnerabilidade log4shell. Primeiro, há 3 partes que precisamos conhecer: 1. O Log4j2 permite o registro de dados usando um recurso chamado substituição de lookup de mensagem , ond...
CVE-2026-18431
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...
go-get-rce
Dieses Repository hat keine README-Datei...
MS15-034
MS15-034 MS15-034 POC L'attuale versione del server IIS è una versione vulnerabile con una vulnerabilità nota CVE-2015-1635, MS15-034. Sfruttando questa vulnerabilità, si rischia di subire attacchi come esecuzione di codice remoto o crash del sistema Blue Screen. Comando di test: wget...
Apache-spark-CVE-2022-33891
Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Seguici Vulnmachines Platform YouTube Twitter...
CVE-2023-4220
CVE-2023-4220 PoC Chamilo LMS RCE non autenticata tramite caricamento di file di grandi dimensioni Questo repository contiene una Proof of Concept PoC per CVE-2023-4220 , una vulnerabilità di Remote Code Execution RCE che affligge Chamilo LMS. Questa vulnerabilità consente ad attaccanti non...
Spring-Cloud-Gateway-CVE-2022-22947
Spring-Cloud-GatewayCVE-2022-22947 Spring Cloud Gateway Schwachstelle für Remotecodeausführung root@kitploit: python3 springrce.py url cmd Aufgrund von Caching, führen Sie den Befehl mehrmals aus...
CVE-2026-60004
CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git apply --cached, which should only update the index and never write files to dis...
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 CVSS score: 9.8, a case of remote code execution that allows an...
CVE-2026-58096
LcpDecodeConfig did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp8 or potentially execute arbitra...
CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins
CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins CVE-2019-1003000 और CVE-2018-1999002 Pre-Auth RCE Jenkins...
CVE-2026-11645-Out-of-bounds-Read-Write
CVE-2026-11645 - Chrome V8 आउट-ऑफ-बाउंड्स रीड/राइट एक्सप्लॉइट ⚠️ चेतावनी यह कोड केवल शैक्षिक उद्देश्यों और अधिकृत परीक्षणों के लिए है। 📋 विवरण CVE-2026-11645, Google Chrome के V8 इंजन में सीमा से बाहर पढ़ने और लिखने OOB की एक भेद्यता है। एक दूरस्थ हमलावर हेरफेर किए गए HTML पृष्ठ के माध्यम से...
CVE-2018-5767-AC9
CVE-2018-5767-AC9 CVE-2018-5767 के लिए एक proof-of-concept का कार्यान्वयन https://vulners.com/cve/CVE-2018-5767 root@kitploit: निम्नलिखित CVE-2018-5767 का एक कार्यान्वयन है, एक भेद्यता जो पासवर्ड के लिए 'Cookie' हेडर को पार्स करते समय होने वाली असुरक्षित sscanf कॉल का शोषण करती है। यह भेद्यता मूल...
PoC-CVE-2019-1003030
जेन्किन्स 2.63 स्क्रिप्ट सुरक्षा सैंडबॉक्स बायपास PoC यह प्रोजेक्ट जेन्किन्स 2.63 द्वारा उपयोग किए जाने वाले Jenkins SecureGroovyScript सत्यापन एंडपॉइंट पर Groovy पेलोड बनाने और वितरित करने को स्वचालित करता है। उपकरण इंटरैक्टिव और एक-शॉट निष्पादन दोनों का समर्थन करता है। एक्सप्लॉइट कोई आउटपुट नही...