118455 matches found
CVE-2021-42183
CVE-2021-42183 MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/. Detection root@kitploit: If this file is readable it means the vulnerablilty exists. https://example.com/index.cfm/api/asset/image/?filePath=/Application.cfc Exploit root@kitploit:...
-CVE-2024-6095
Key Enhancements: 1. Random String Obfuscation : Introduced random string generation to obfuscate paths, making detection harder. 2. Advanced Payloads : Added more sophisticated payloads with different obfuscation techniques to evade security mechanisms. 3. Custom Headers : Included custom header...
CVE-2025-49144
PoC de PlantaciΓ³n Binaria de Notepad++ CVE-2025-49144 β οΈ SOLO CON FINES EDUCATIVOS Este cΓ³digo estΓ‘ diseΓ±ado para fines educativos y de investigaciΓ³n para comprender las vulnerabilidades de plantaciΓ³n binaria. Γselo solo en entornos controlados con la autorizaciΓ³n adecuada. π Resumen Esta Prueba d...
trustmebro
Bypass llm guardrails by confusing it with fabricated tool output. Results Β· Installation Β· Quick start Β· Rules Β· Architecture TrustMeBro intercepts command-line tools invoked by coding agents such as Codex, Claude Code, and pi. Rules decide whether to return fabricated output, modify the real...
CVE-2024-38816-PoC
CVE-2024-38816 Proof of Concept PoC This is a proof of concept for the CVE-2024-38816 vulnerability, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image: Spring Boot 3.0.13, based on Spring Framework 6.0.3 root@kitploit: docker build -t cve-2024-38816-poc . 2. Run th...
phpunit-brute
phpunit-brute Tool to try multiple paths for PHPunit RCE CVE-2017-9841 and it will log found paths to found.txt in the dir. It uses the following list of paths https://raw.githubusercontent.com/random-robbie/bruteforce-lists/master/phpunit.txt if you have a path that is not on there please submit...
CVE-2023-23946-POC
CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023-23946 The CVE-2023-23946 vulnerability is caused by a flaw in the way git handles symbolic links. When git creates a symbolic link, it doesnt actually handle it as a symbolic link and because of that we can exploit it to point to file...
CVE-2025-8088-Exploit
CVE-2025-8088 WinRAR Exploit π A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...
CVE-2026-49049
CVE-2026-49049 β Helix3 JoomShaper Joomla Unauthenticated AJAX RCE Scanner Mass scanner / verifier for CVE-2026-49049 : unauthenticated AJAX handler in the Helix3 Framework plugin for Joomla v1.0 β 3.1.0 , patched in 3.1.1+. Authorized testing only. Use only on systems you own or have written...
CVE-2025-55182
Understanding React Server Components and the Flight Protocol React Server Components is a feature introduced in React 19 that allows components to be rendered on the server instead of in the client's browser. The server can handle complex computational tasks while only sending the rendered resul...
claude_opus_cve_2023_0266
DemostraciΓ³n de que Claude 3 Opus no entiende CVE-2023-0266 y no lo encuentra Demo 1. Incluso si se le dice dΓ³nde estΓ‘ el error, Opus no lo encuentra y alucina la presencia de adquisiciones de bloqueo Demo 2. La "ingenierΓa de prompts" tambiΓ©n conocido como decirle al LLM exactamente cΓ³mo encontr...
CVE-2018-20250
exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want root@kitploit: ... ... The...
CVE-2007-4559
demostraciΓ³n de CVE-2007-4559 ΒΏquΓ© es esto? Esta es una demostraciΓ³n de cΓ³mo el manejo predeterminado de Python para la extracciΓ³n de archivos tar anterior a Python v3.11.4 es vulnerable a un simple ataque de symlink. Las instrucciones a continuaciΓ³n describen cΓ³mo crear un payload malicioso. El...
CVE-2021-42013-EXPLOIT
π¨ CVE-2021-42013 - Apache 2.4.49 & 2.4.50 Remote Code Execution π¨ CVE-2021-42013 builds upon the previously identified vulnerability, CVE-2021-41773. Despite the Apache team's efforts to address CVE-2021-41773 in version 2.4.50, subsequent investigations revealed that the fix fell short of fully...
CVE-2026-0847
CVE-2026-0847 β NLTK Multiple CorpusReader Classes: Arbitrary File Read via Path Traversal -orange?style=for-the-badge Overview...
CVE-2026-53576
Kestra Unauthenticated RCE Exploit CVE-2026-53576 Critical Authentication Bypass leading to Unauthenticated Remote Code Execution Exploit β’ Vulnerability Details β’ Impact β’ Remediation β οΈ DISCLAIMER This tool is for educational and authorized security testing purposes only. DO NOT use this against...
Apache-CVE-2021-42013-RCE-Exploit
π Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...
CVE-2024-23339
CVE-2024-23339 μ·¨μ½μ κ°μ CVE-2024-23339 CVSS : 6.5 Jan 23, 2024 ProtoType Pollution in node.js package rebob νλ‘μ νΈμ μΌν μ·¨μ½μ μ€λͺ github advisories hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utilit...
CVE-2024-47051
Summary Bad sanitization of uploaded file's content, type and extension in the Asset Edition feature allows an authenticated attacker to write arbitrary PHP code inside the web directory and locate where said file is written. This results in Remote Code Execution. A path traversal also allows to...
cve-2023-50164-poc
PoC for CVE-2023-50164 Install To install this tool you must have Go version at least 1.20 installed and configured. $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest Alternatively, you can compile it by DIY: $ git clone http://github.com/dwisiswant0/cve-2023-50164-poc...