xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Remote Code Execution Xerte Online Toolkits versions 3.15 and earlier suffer from 3 vulnerabilities in the /editor/elfinder/php/connector.php component, which may be chained together by an unauthenticated attacker to achieve Remote Code Execution RCE. Affected Version...

CVE-2022-22978-demo

CVE-2022-22978-demo Código de ejemplo de la vulnerabilidad CVE-2022-22978 Condiciones de explotación Aunque está clasificada como de alta gravedad, las condiciones de explotación son bastante estrictas; personalmente creo que esta vulnerabilidad es bastante insignificante. 1. En primer lugar, por...

CVE-2022-23378

CVE-2022-23378 : Reflected XSS in TastyIgniter v3.2.2 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version v3.2.2. Mitre URL: https://vulners.com/cve/CVE-2022-23378 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-23378 Proof of Concept POC: Admin...

CVE-2020-5902

Summary In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Credits: Mikhail...

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in plexus-utils, OpenSSL, jose4j, Go net/url, and Apache Hadoop

Summary IBM Optim versions 1.0.0, 1.1.0, and 1.2.0 include open-source packages plexus-utils, OpenSSL, jose4j, Go net/url, and Apache Hadoop that are affected by five vulnerabilities ranging from high to medium-high severity, including path traversal, stack buffer overflow, denial-of-service via...

Rails-doubletap-RCE

Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

CVE-2021-45010

CVE-2021-45010 🐍 Exploit PoC en Python creado para CVE-2021-45010. Tiny File Manager 2.4.7 Uso root@kitploit: usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME...

CVE-2024-23334

CVE-2024-23334 Prueba de concepto para la vulnerabilidad de LFI/Path Traversal en Aiohttp = !IMPORTANT Este script está destinado únicamente con fines educativos. Cualquier uso ilegal está estrictamente prohibido. ¿Cómo ejecutar? root@kitploit: $ git clone...

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 (optim-spark) images by vulnerabilities in github.com/caddyserver/caddy/v2 package

Summary Impacted IBM optim 1.0.0, 1.1.0 optim-spark images by vulnerabilities in github.com/caddyserver/caddy/v2 package. IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-27587 DESCRIPTION:...

CVE-2024-9047-Exploit

CVE-2024-9047: Exploit for WordPress File Upload Plugin Description The WordPress File Upload plugin for WordPress is vulnerable to a Path Traversal vulnerability in all versions up to, and including, 4.24.11 via the wfufiledownloader.php file. This vulnerability allows unauthenticated attackers ...

CVE-2021-41773_CVE-2021-42013_Exploits

Exploiting CVE-2021-41773 and CVE-2021-42013 Overview This repository focuses on exploiting two vulnerabilities in Apache HTTPD: CVE-2021-41773 and CVE-2021-42013. These CVEs represent path traversal vulnerabilities that can potentially lead to file mapping and remote code execution on Apache HTT...

log4shelldetect

log4shelldetect Escanea un archivo o carpeta de forma recursiva en busca de programas Java que puedan ser vulnerables a: CVE-2021-44228 Log4Shell v2.0.x - v2.14.x CVE-2021-45046 v2.15.x CVE-2021-45105 v2.16.x1 inspeccionando las rutas de clase dentro de los archivos. Si solo desea que se impriman...

CVE-2026-40987

CVE-2026-40987: PoC de Path Traversal en la sincronización remota de archivos de Spring Integration Este repositorio es un PoC mínimo para reproducir CVE-2026-40987, publicado en el aviso de seguridad oficial de Spring. Aviso oficial: https://spring.io/security/cve-2026-40987/ Título oficial:...

CVE-2024-3400-pot

CVE-2024-3400-pot Simple honeypot for CVE-2024-3400 Palo Alto PAN-OS Command Injection Vulnerability. Features Simulate when visiting the /global-protect/login.esp login page of the GlobalProtect Portal Simulate HTTP request POST /ssl-vpn/hipreport.esp & Cookie:...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "Si se explota, la vulnerabilidad de seguimiento de enlaces podría permitir a atacantes remotos que hayan obtenido acceso d...

CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 Versiones Afectadas = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Prueba de Concepto CVE-2024-32019 — escalada local de privilegios de ndsudo mediante ruta de búsqueda no confiable. 🔧 Compilar el Exploit root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤 Desplegar en...

CVE-2021-41773

Imágenes Docker vulnerables para CVE-2021-41773 Apache path traversal Esta vulnerabilidad solo aplica a la versión 2.4.49 que tiene configuraciones específicas no predeterminadas. En ciertas situaciones, esto puede resultar en lectura de archivos o ejecución de código...

cve-2026-27483

CVE-2026-27483 MindsDB Path Traversal to RCE PoC This PoC script is based on the following GitHub advisory By default MindsDB does not use auth PoC supports both unauthenticated and authenticated modes We can query /api/handlers/ to find available handlers, use any available but not installed...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs es un servicio Git ligero y autoalojado similar a una versión privada de GitHub, diseñado para ejecutarse fácilmente en servidores de bajos recursos. La vulnerabilidad CVE-2025-8110 es un fallo de seguridad crítico que permite a un atacante eludir las restricciones de...