CVE-2023-41425

CVE-2023-41425 Writing one because the one I found isn't working Usage root@kitploit: python3 exploit.py http://example.com/loginURL 10.10.xx.xx 9001...

CVE-2020-14882

Gracias a NS-Sp4ce, Jas502n, s1kr10s, demon, 斯文 Referencias: https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and...

github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy

A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...

CVE-2024-31819

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...

CVE-2026-51564

CVE-2026-51564 Aviso de seguridad para CVE-2026-51564 Descripción Un problema en el parámetro redirect en Milk admin =0.9.8 permite a atacantes remotos redirigir a los usuarios a URLs externas arbitrarias mediante una solicitud manipulada. Componentes afectados: App/Route.php, publichtml/index.ph...

Apache-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Contributors 이희수@lheeeesoo Apache HTTP Server 2.4.49 has a vulnerability where it fails to properly block encoded parent paths during URL path normalization. An attacker can use values like .%2e to traverse outside the directories that the web serv...

CVE-2021-43778

CVE-2021-43778 CVE-2021-43778 poc usage: CVE-2021-43778 http://test.com...

CVE-2021-41773-POC

CVE-2021-41773-POC The POC and Lab setup documentation of CVE 2021 41773 What is CVE-2021-41773? CVE-2021-41773 is a path traversal vulnerability in Apache HTTP server 2.4.49 and 2.4.50. This vulnerability exploits an update in the path normalisation code introduced in this version. root@kitploit...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2026-36468

Cross-site Scripting XSS in index.php in CuteNews v.2.1.2 allows remote unauthenticated attackers to supply an arbitrarily named URL parameter key, with part of its name containing any URL-encoded common XSS payload such as "alert1...

ingressnightmare-detection-poc

IngressNightmare Detection Tool Overview This tool provides a non-intrusive detection capability for the IngressNightmare vulnerability chain CVE-2025-1974 affecting Ingress NGINX Controller. It specifically leverages the auth-url annotation injection vector CVE-2025-24514 to verify the presence ...

CVE-2026-94095

Netcore NBR200V2 - Inyección Remota de Comandos en la Función de Diagnóstico Traceroute CVE-2026-94095 Campo| Valor ---|--- Fabricante| Netcore Modelo| NBR200V2 Versión de Firmware| V1.3.241127.071246 Componente Afectado| /usr/bin/networktools Tipo de Vulnerabilidad| Inyección de Comandos del SO...

CVE-2023-27372

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...

CVE-2025-32778

CVE-2025-32778 - Web-Check Command Injection Exploit Description CVE-2025-32778 is a critical command injection vulnerability in Web-Check OSINT tool by Lissy93. It allows unauthenticated attackers to execute arbitrary system commands via the url parameter in the screenshot API. This Python scrip...

-CVE-2025-0133-GlobalProtect-XSS

mitsecvpnxssexploit 🔓 Exploit para el endpoint SSL VPN de GlobalProtect /ssl-vpn/getconfig.esp que añade un payload XSS manipulado a la URL. Uso root@kitploit: python3 exploit.py -u https://target.com Parámetros -u, --url: URL base del objetivo no incluyas parámetros de consulta Vista previa del...

CVE-2023-30777

CVE-2023-30777 Proof of Concept PoC URL generator for a reflected XSS vulnerability in the Advanced Custom Fields WordPress plugin. PoC Generate by : Alucard0x1 Credit of Exploit : https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...

CVE-2026-55870

GoCD is a continuous deliver server. Prior to 26.1.0, GoCD can return unmasked credentials that administrators stored in the userinfo portion of source control material URLs through several read-only APIs available to regular authenticated users. Although GoCD recommends dedicated username and...

CVE-2026-55870 GoCD is vulnerable to credential exposure when admins insecurely configure material URLs

GoCD is a continuous deliver server. Prior to 26.1.0, GoCD can return unmasked credentials that administrators stored in the userinfo portion of source control material URLs through several read-only APIs available to regular authenticated users. Although GoCD recommends dedicated username and...

CVE-2026-55870 GoCD is vulnerable to credential exposure when admins insecurely configure material URLs

GoCD is a continuous deliver server. Prior to 26.1.0, GoCD can return unmasked credentials that administrators stored in the userinfo portion of source control material URLs through several read-only APIs available to regular authenticated users. Although GoCD recommends dedicated username and...