228487 matches found
grafanaExp
grafanaExp Utilizza la vulnerabilità di lettura arbitraria dei file CVE-2021-43798 di Grafana, rileva automaticamente se esiste una vulnerabilità, i plugin presenti, estrae la chiave, decifra il file db del server e restituisce le informazioni datasourrce. Utilizzo Fornisce funzionalità exp e...
CVE-2026-78250
bytebot-ai bytebot 0.0.1 is affected by a vulnerability in the Agent Execution Workflow component where manipulation of an unknown function leads to an infinite loop , resulting in a denial of service (availability impact only). The attack can be performed remotely and requires low privileges (CV...
Exploit for CVE-2026-18963
POC-CVE-20...
CVE-2026-78247
A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , triggered through manipulation of the ID argument in the file /fos/admin/ajax.php?action=confirm_order. The flaw allows a remote, unauthenticated attacker to inject SQL commands, leading to low impact ...
CVE-2026-78247 SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
EUVD-2026-64838
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 Questo repository contiene una spiegazione dettagliata e un PoC funzionante per Rejetto HTTP File Server HFS 2.3.x - Esecuzione remota di comandi. Configurazione: Crea un listener netcat. root@kitploit: nc -lnvp 1234 Cambia l'IP...
regreSSHive
regreSSHive Exploit SSH riscritto per CVE-2024-6387 regreSSHion...
RegPwn
🛠️ RegPwn - Strumento di Exploit Locale per Windows RegPwn è uno strumento progettato per dimostrare un exploit di escalation dei privilegi locali LPE sui sistemi Windows. Funziona su Windows 10, Windows 11 e versioni di Windows Server. Questa guida ti aiuterà a scaricare, preparare ed eseguire...
cve-2025-55182
CVE-2025-55182 - Эксплуатация RCE в React Server Components CLI эксплойт на Python для CVE-2025-55182, критической уязвимости RCE в React Server Components через react-server-dom-webpack. Основано на: ejpir/CVE-2025-55182-poc Сборка и запуск уязвимого контейнера root@kitploit: docker build -t...
CVE-2023-23946
Exploit CVE-2023-23946 Questo repository contiene un Proof of Concept PoC funzionante per CVE-2023-23946 , che colpisce Git precedente alle versioni 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7 e 2.30.8. Dimostrazione Utilizzo root@kitploit: git clone...
CVE-2026-64600-Exploit
इस रिपॉजिटरी में README नहीं है।...
CVE-2023-23752
Installation root@kitploit: git clone https://github.com/0xx01/CVE-2023-23752.git cd CVE-2023-23752 chmod +x exploit.sh Verwendung root@kitploit: ./exploit.sh http://localhost...
CVE-2026-78244
A SQL injection vulnerability exists in itsourcecode Real Estate Management System 1.0 , specifically in the file search.php . Manipulating the arguments search, delivery_type, search_price, or property_type allows an unauthenticated remote attacker to inject SQL, with no user interaction require...
EUVD-2026-64777
A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...
Astra Linux – Vulnerability in Apache2
When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...
CVE-2024-28397-RCE
CVE-2024-28397-RCE CVE-2024-28397 - Esecuzione remota di codice da JS2PY vulnerabile Uso: python3 exploit.py...
CVE-2025-2304
Camaleon CMS v2.9.1 - Mass Assignment porta a Privilege Escalation - Strumento di Exploit - PoC Descrizione Questo progetto è uno strumento proof of concept di sfruttamento basato su Python che dimostra e analizza una vulnerabilità di escalation dei privilegi che interessa le versioni v2.9.1 di...
CVE-2019-9053-Fixed
L'utente si assume ogni responsabilità per qualsiasi azione intrapresa utilizzando questo strumento. Se questi termini non sono accettabili, non utilizzare questo strumento. Usalo solo in ambienti in cui ti è consentito svolgere attività di pentesting Correzioni di bug per l'exploit CVE-2019-9053...