CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2- edit the appointment class and add the below: 3- create a new class inside the project to set the proprieties of the msg file: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using...

CVE-2024-36991

CVE-2024-36991 - Splunk Path Traversal Proof of Concept for CVE-2024-36991 which allows an attacker to read arbitrary files in Splunk for versions below to 9.2.2, 9.1.5, and 9.0.10 for Windows. Usage Read Splunk configuration files To read Splunk files just run the script passing the target URL...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to exploit the WinRAR ACE file extraction path CVE-2018-20250. Resources https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Dependencies InvertedTomato.Cr...

CVE-2022-30333

A proof of concept for CVE-2022-30333 - a path traversal vulnerability in unRAR versions prior to 6.11. I created this as a demonstration of the exploit for an AttackerKB writeup, and hope to incorporate it in a Metasploit Module soon! Basically, you provide a target including path traversal and...

CVE-Arsenal-Lab

TomcatScanner Расширенный инструмент для обнаружения и эксплуатации уязвимости CVE-2025-24813 TomcatScanner — это комплексный инструмент безопасности, предназначенный для обнаружения и эксплуатации уязвимости CVE-2025-24813 на серверах Apache Tomcat. Эта уязвимость связана с проблемой...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - Contournement de chemin WinRAR - Exécution de code à distance RCE Preuve de Concept Plus d'informations : https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/...

CVE-2023-26469

CVE-2023-26469 REC PoC This repository contains an exploit script for CVE-2023-26469, which allows an attacker to leverage path traversal to access files and execute code on a server running Jorani 1.0.0. Additionally, the script includes shell upload functionality for further exploitation...

CVE-2021-26085

CVE-2021-26085 POC de la vulnérabilité de lecture arbitraire de fichier avant authentification dans Atlassian Confluence Server 7.5.1 Points de terminaison vulnérables : root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

CVE-2020-14882

CVE-2020–14882 Weblogic Unauthorized bypass RCE bypass patch with CVE-2020–14882 private static final String IllegalUrl = new String";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", ""; list root@kitploit: %252E%252E %2E%2E .. %3E %3C ; lower root@kitploit: "%252E%252E%252F".lower '%252e%252e%252f...

CVE-2026-85706

CVE-2026-85706 : Traversée de chemin non authentifiée dans GitLab CE/EE CVE : CVE-2026-85706, CVSS 3.1 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Composant : GitLab CE/EE Repository Commits API variante Workhorse body-upload Impact : 18.7 ≤ version 19.1.8, 19.2.0–19.2.5, 19.3.0–19.3.1 Correctif :...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Fixed Version Description This is an exploit for the Apache HTTP Server 2.4.49 vulnerability identified as CVE-2021-41773. The original version of the exploit published on Exploit-DB contained syntax and execution...

CVE-2024-53677

CVE-2024-53677 - Environnement de reproduction de la vulnérabilité d'exécution de code à distance RCE dans Apache Struts 2 Ce dépôt fournit un environnement basé sur des conteneurs pour reproduire la vulnérabilité CVE-2024-53677 dans Apache Struts 2. Cette vulnérabilité implique un contournement ...

CVE-2022-35899

CVE-2022-35899 Chemin de service sans guillemets Asus GameSdk Titre de l'exploit : Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Chemin de service sans guillemets Élévation de privilèges Date : 07/14/2022 Auteur de l'exploit : Angelo Pio Amirante Version : 1.0.0.4 Testé sur : Windows 10 Version corrigée ...

CVE-2024-27954

CVE-2024-27954 📝 CVE-2024-27954 - Vulnérabilité de Path Traversal et SSRF dans le plugin WP Automatic Description Une limitation incorrecte d'un chemin d'accès à un répertoire restreint 'Path Traversal' existe dans le plugin WP Automatic, permettant des attaques de Path Traversal et de Server-Sid...

gh0st

gh0st beta 3.6...

CVE-2020-9484

CVE-2020-9484 Reproduce Apache Tomcat Session Deserialization Code Execution Vulnerability CVE-2020-9484 with Kali 2.0 Environment: 1. Kali 2.0 2. apache-tomcat-7.0.61-CVE-2020-9484.tar.gz webapp is s2-053, added commons-collections4-4.0.jar under its lib Start /yourtomcatdir/bin/startup.sh...

CVE-2024-34470

CVE-2024-34470 PoC and Bulk Scanner Overview This is a proof-of-concept PoC and bulk scanner for CVE-2024-34470: Path Traversal vulnerability HSC Mailinspector affects all versions up to 5.2.18. How to Use POC in Action: Single Target Scan To scan a single target IP: root@kitploit: python...

CVE-2006-2842

Badges License MIT Installation Install cve-2006-2842 with npm root@kitploit: npm install cve-2006-2842 -g Usage Example for single url root@kitploit: cve-2006-2842 -u http://example.com Usage Example for list of urls root@kitploit: cve-2006-2842 -l urls.txt -o out.txt Screenshots Help menu Get a...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 Comment exécuter le lab CVE-2021-41773-Path Traversal 1. Installez et exécutez Docker sur votre PC/portable 2. Clonez ce dépôt GitHub 3. Allez dans le dossier Path Traversal 4. Saisissez les commandes suivantes docker build -t cve-2021-41773-path-travers...