Telerik_CVE-2019-18935

Сканер TelerikUI на Python telerikrcescan.py Примеры Проверка IP на CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Проверка имени хоста на CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Проверка диапазона сети CIDR на CVE-2019-18935 $ python3 telerikrcescan.py -...

CVE-2026-24061-telnet2root

Scanner ed Exploit per la Vulnerabilità CVE-2026-24061 👨‍💻 Autore: Furkan KAYAPINAR @FurkanKAYAPINAR Panoramica Questo repository contiene uno scanner di vulnerabilità e un exploit interattivo per CVE-2026-24061. Questa vulnerabilità colpisce inetutils-telnetd e potenzialmente altre implementazioni...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Oracle WebLogic Server Proxy Plug-In RCE रिमोट कोड एक्ज़ीक्यूशन भेद्यता शोषण उपकरण का Java GUI संस्करण। प्रोजेक्ट संरचना root@kitploit: java-version/ ├── pom.xml Maven प्रोजेक्ट कॉन्फ़िगरेशन फ़ाइल ├── README.md प्रोजेक्ट दस्तावेज़ीकरण ├── run.bat Windows...

CVE-2025-59287

CVE-2025-59287 WSUS CVE-2025-59287 – Deserializzazione XML RCE Reverse Shell Un PoC mirato per sfruttare WSUS CVE-2025-59287 tramite deserializzazione XML per ottenere una reverse shell Windows. Questo script supporta solo un payload di reverse shell nessun fallback calc. Target: Windows Server c...

CVE-2014-0196

См. https://vulners.com/cve/CVE-2014-0196...

CVE-2025-58434-AND-59528-POC

PoC Duale Flowise CVE — CVE-2025-58434 + CVE-2025-59528 ⚠️ Solo per scopi educativi e ricerca di sicurezza autorizzata. Eseguire questo strumento contro sistemi che non possiedi o per cui non hai autorizzazione scritta è illegale. Indice Panoramica Dettagli delle vulnerabilità CVE-2025-58434 —...

CVE-2024-22274-RCE

CVE-2024-22274-Exploit Dieses Repository enthält einen Exploit für CVE-2024-22274. Der Exploit erstellt einen neuen Benutzer auf einem entfernten Rechner über SSH und stellt anschließend eine Root-Shell bereit. Voraussetzungen Go Golang muss auf deinem Rechner installiert sein. Du kannst es von...

tivoli-poc

tivoli-poc Código PoC do CVE-2017-1635 CVEID: CVE-2017-1635 Pontuação Base CVSS: 8 Produtos e versões afetados: componente KDH dos serviços básicos do IBM Tivoli Monitoring KGL,KAX para as versões 6.2.2.0 a 6.2.2.9 Existe uma vulnerabilidade no servidor web interno fornecido pelos serviços básico...

CVE-2023-50164-Apache-Struts-RCE

Contient un fichier WAR vulnérable et un fichier docker pouvant être utilisés pour tester CVE-2023-50164-Apache-Struts-RCE. Ce dockerfile et l'application vulnérable sont compilés et conçus en utilisant les ressources et le code de https://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE...

CVE-2019-19781

Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Exploit d'exécution de code à distance pour Citrix Application Delivery Controller et Citrix Gateway CVE-2019-19781 Utilisation : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE ex. : bash...

Log4Shell

Log4Shell Questa repository riguarda la dimostrazione e la mitigazione della vulnerabilità Log4j 2021 CVE-2021-44228. Cos'è Log4Shell? La vulnerabilità CVE-2021-44228 / Log4Shell consiste nell'iniettare un payload dannoso in un software vulnerabile, che chiederà a Log4J di ottenere un valore da u...

CVE-2021-41773-exercise

CVE-2021-41773-exercise A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by...

CVE-2023-4220-PoC

CVE-2023-4220 رفع ملفات تعسفي / RCE - PoC أنشأت هذا السكربت لأتمتة استغلال CVE-2023-4220 والحصول على شل عكسي على جهاز Hack The Box PermX. هذه الثغرة تؤثر على إصدارات Chamilo LMS ≤ 1.11.24 ، بسبب عدم كفاية التحقق في وظيفة الرفع الكبير. يمكن لمهاجم غير مصادق رفع ملفات إلى دليل متاح للعامة، مما قد...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - Exploit LFI e RCE Info root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...

CVE-2025-0868

Relatório de Projeto de Teste de Penetração: Explorando CVE-2025-0868 RCE no DocsGPT via JSON Eval 1. Introdução Uma falha crítica de Execução Remota de Código RCE CVE-2025-0868 foi divulgada em 20 de fevereiro de 2025 na biblioteca open-source DocsGPT, causada pelo uso inseguro de eval ao...

CVE-2025-68613-POC

🚨 CVE-2025-68613: Kritische RCE-Sicherheitslücke in n8n Table of Contents 1. Übersicht 2. Was ist n8n? 3. Grundlagen der Sicherheitslücke 4...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - toolchain de exploit XSS CSRF RCE PacketStorm WLB-2020080010 Aviso: este toolchain de exploit foi inspirado por EDB-ID 20009. Objetivo O objetivo deste toolchain de exploit é substituir o EDB-ID 20009. Vantagens deste toolchain sobre o exploit EDB-ID 20009:...

Umbraco-RCE

Umbraco RCE-Exploit / PoC Umbraco CMS 7.12.4 - authentifizierte Remote-Codeausführung EDB-49488 PacketStorm WLB-2020080012 Verwendung root@kitploit: $ python exploit.py -h usage: exploit.py -h -u USER -p PASS -i URL -c CMD -a ARGS Umbraco authenticated RCE optional arguments: -h, --help show this...

OpenEMR-RCE

OpenEMR RCE exploit / PoC OpenEMR --shell --user --password --debug exploit.rb semi-auto --root-url --user --password --payload --lhost --lport --debug exploit.rb auto --root-url --user --password --lhost --lport --debug exploit.rb -H | --help Options: -r , --root-url Root URL base path including...

CVE-2026-54806

WP Activity Log Iniezione di Oggetti PHP CVE-2026-54806 PoC 📜 Descrizione CVE-2026-54806 è una vulnerabilità critica CVSS 9.8 di iniezione di oggetti PHP non autenticata nel plugin WP Activity Log per WordPress wp-security-audit-log di Melapress. Un utente malintenzionato non autenticato può...