487785 matches found
CVE-2023-38831
CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.win-rar.com/...
CVE-2021-42663
CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 2.3.0. An attacker can leverage this vulnerability...
CVE-2020-14065
Icewarp Email Server 12.3.0.1 unlimitedfileupload https://nvd.nist.gov/vuln/detail/CVE-2020-14065...
cve-2022-1364
tested in Bromite v95.0.4638.79 armChromePublic.apk...
CVE-2024-39844
CVE-2024-39844 CVE-2024-39844 ZNC 1.9.1 modtcl RCE HexChat plugin to exploit CVE-2024-39844...
vulhub-struts2
S2-045 远程代码执行漏洞（CVE-2017-5638） 影响版本: Struts 2.3.5 - Struts 2.3.31, Struts 2.5 - Struts 2.5.10 漏洞详情: http://struts.apache.org/docs/s2-045.html https://blog.csdn.net/u011721501/article/details/60768657 https://paper.seebug.org/247/ 漏洞环境 执行如下命令启动struts2 2.3.30： root@kitploit: docker compose up -d...
CVE-2023-5360
CVE-2023-5360 CVE-2023-5360 Subida Automática de Shell en WordPress Royal Elementor 1.3.78 Subida de Shell...
CVE-2022-24086
PoC de CVE-2022-24682 ¿Cómo funciona este método de detección? Como se indica en los avisos, las versiones 8.8.x anteriores al parche 30 actualización 1 de 8.8.15 son vulnerables a ataques; la plantilla comprueba las siguientes versiones: root@kitploit: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" -...
CVE-2023-43208
Mirth Connect RCE - CVE-2023-43208 Descripción PoC para la ejecución remota de código RCE en Mirth Connect. Afecta a Mirth Connect Ejemplo Iniciar listener root@kitploit: nc -lvnp 4444...
CVE-2017-9554-Exploit-Tool
CVE-2017-9554-Exploit-Tool Herramienta de Exploit CVE-2017-9554 Synology DiskStation Manager DSM 6.1.3-15152 - Herramienta de Exploit de Enumeración de Usuarios 'forgetpasswd.cgi' Autor del Exploit : Steve Kaun Autor de la Herramienta de Exploit : Ez0-yf Página del Proveedor :...
-CVE-2025-59528-PoC
CVE-2025-59528-PoC FOR EDUCATIONAL PURPOSES ONLY A simple python script to exploit CVE-2025-59528, this an Authenticated RCE vulnerability in Flowise application, a popular AI tool, that is also part of an HTB seasonal challenge, on which I tested it btw. If it's not working, make sure the comman...
Apache-Hunter
ApacheHunter - Advanced Apache Server Scanner Developed by Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunter is a powerful scanner designed to detect Apache servers, identify versions, and check for CVE-2024-22393 Pixel Flood vulnerability in Apache Answer installations. Features ✅...
CVE-2022-41741-742-Nginx-Vulnerability-Scanner
🛡️ Nginx Vulnerability Scanner Developed by m10sec. This script automatically detects the Nginx version on a remote server and evaluates whether it is vulnerable to known security flaws, specifically: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Memory corruption in ngxhttpmp4module...
CVE-2025-6254
CVE-2025-6254 python exploit.py -u http://localhost:8080 python exploit.py -f targets.txt -T 50 -t 8 python exploit.py -f targets.txt -o sonuclar.txt --role editor CVE-2025-6254 - Doctreat Core = 1.6.8 Escalada de Privilegios No Autenticada ÚSELO SOLO EN SU PROPIO ENTORNO DE PRUEBAS...
cve-2023-45612_exploit
cve-2023-45612exploit CVE-2023-45612 is a high severty security probem that allows XXE XML eXternal Entity attacks on Ktor's XML serialization that has been patched in 2023. Reproduction of the security problem Below is a detailed way of how I reproduced the problem. IntelliJ IDEA project First, ...
CVE-2023-29007_win-version
CVE-2023-29007win-version PoC original https://github.com/ethiack/CVE-2023-29007 Repositorio de PoC para CVE-2023-29007 Más información disponible en: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007...
OpenSSL-2022
Vulnerabilidad de OpenSSL 2022 - CVE-2022-3602/CVE-2022-3786 Este repositorio contiene información operativa sobre CVE-2022-3602 y CVE-2022-3786, dos vulnerabilidades en OpenSSL 3.0.0-3.0.6. Para más información, consulte: Aviso de seguridad de OpenSSL Preguntas frecuentes del blog de OpenSSL Avi...
PoC-CVE-2024-44349
PoC-CVE-2024-44349 Vulnerability found and tested in Anteeo WMS - v4.7.31 The vulnerability allows threat actors to craft an SQL command inside the username parameter and disclose data in the underlying database. The impacted versions of ANTEEO B2B WMS are from v.4.7.x to v.4.7.34 excluded. Usage...
lua-ffi-libinjection
Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...