Microsoft-2024-December-Update-Control

Windows December 2024 Security Patches Audit Script This PowerShell script checks whether the required KB updates for specific security vulnerabilities CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, and CVE-2024-49122 announced in the December 2024 Microsoft security bulletins are installed on...

CVE-2023-43494

CVE-2023-43494 Jenkins 2.50 through 2.423 both inclusive, LTS 2.60.1 through 2.414.1 both inclusive File Read References: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...

linux-4.1.15_CVE-2022-45934

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

CVE-2019-16662

CVE-2019-16662 The official exploit for rConfig 3.9.2 Remote Code Execution CVE-2019-16662...

CVE-2025-0994

CVE-2025-0994 How does this detection method work? This Nuclei template extracts the version stored in the HTML body and based on the version we can determine whether the instance is vulnerable to CVE-2025-0994 or not. Patched version: 15.8.9 How do I run this script? 1. Download Nuclei from here...

AWS-Tough-Library-Multiple-CVEs

AWS Tough Library Multiple CVEs In March 2025, multiple security vulnerabilities were disclosed in AWS Labs’ Tough library a Rust client implementation of TUF – The Update Framework. These issues are tracked under CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 and CVE-2025-2888, and were fixed in...

cargo-perm

Description A new vulnerability in cargo version 1.7.0 has been found as explained here. Step by Step First you have to make sure your cargo version is vulnerable cargo --version Supose I have a cargo project with the following src/main.rs file: root@kitploit: use numbigint::BigInt; use...

mybb-CVE-2022-24734

mybb-CVE-2022-24734 MyBB 1.8.29 - Remote Code Execution root@kitploit: git clone https://github.com/lavclash75/mybb-CVE-2022-24734.git cd "mybb-CVE-2022-24734" docker-compose down docker system prune -a docker rm -f $docker ps -a -q docker volume rm $docker volume ls -q docker-compose up -d...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 由我发现的漏洞 CVE-2019-15053 公告：advisory.txt 基本信息 root@kitploit: Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested Versions....: 1.4.2...

apache__dolphinscheduler_CVE-2022-34662_2-0-9

Dolphin Scheduler Official Website dolphinscheduler.apache.org...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...

CVE-2020-3161

CVE-2020-3161 Cisco IP Phone 11.7 - Denial of Service PoC...

CVE-2022-31301

CVE-2022-31301 Haraj Script 3.7 - Post Ads Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31301 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Versio...

CVE-2025-51400

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Personal Canned Messages Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software...

CVE-2025-3102

CVE-2025-3102 SureTriggers WordPress 插件存在一个严重身份验证绕过漏洞（CVE-2025-3102），影响所有版本，包括1.0.78及之前版本。...

spring-webmvc5

spring-webmvc5 Fork of spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819 Maven Add the following to the dependencies section of your project's pom.xml: root@kitploit: io.github.jaloon spring-webmvc5 5.3.39.1...

OpenSSL-1_0_1g_CVE-2015-1792

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

cve-2022-33082-exploit

CVE 2022-33082 Exploit DISCLAMER This code is provided for ETHICAL purposes - understanding the vulnerability and testing one's own systems or AUTHORIZED systems. By using this, you agree to act ethically and I hold no liability if you do not act ethically. This exploit works on Open Policy Agent...

Next.JS-CVE-2025-29927

Next.js Vulnerability Scanner CVE-2025-29927 A security tool to detect and verify Next.js applications vulnerable to CVE-2025-29927 Authentication Bypass. Features 🎯 Accurate Next.js detection with multiple verification methods 🔍 Precise version comparison to identify vulnerable instances 🛡️...

CVE-2018-16167

Installation and Execution Sequence 0. LogonTracer Installation Download the logontracer version 1.2.0, where a vulnerability was found, from dockerhub. root@kitploit: $docker pull jpcertcc/docker-logontracer:v1.2.0 1. LogonTracer Execution Launch it in a container with the following command...