-CVE-2022-1609

CVE-2022-1609 CVE-2022-1609 WordPress Weblizar バックドア用 Bash PoC インストール方法 root@kitploit: wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 使用方法 root@kitploit: GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 + Targeting...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 インターンシップのテストタスク用リポジトリです。 ステップ0: このgitリポジトリをクローンする root@kitploit: git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 ステップ1: Dockerコンテナを作成する Dockerデーモンを起動する root@kitploit: sudo systemctl start docker.service Dockerコンテナを起動する...

CVE-2022-1609

CVE-2022-1609 CVE-2022-1609 WordPress Weblizar Backdoor の Bash poc インストール方法 ? root@kitploit: wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 使用方法 ? root@kitploit: NullBrunk$ ./exploit.sh http://127.0.0.1:8080 + Targeting...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

CVE-2020-8816

このエクスプロイトに対する防御のための注意事項 パッチ適用 今すぐ実行してください…今すぐに。 新しいリリース（そして本気なら Issue や Pull request も）を確認するために Pi-hole リポジトリ を購読/監視してください。 ネットワーク Pi-hole をインターネットに公開しないでください。 Pi-hole の DNS ポート 53 のみを DNS クライアントに公開し、管理インターフェースなどの他のポートは公開しないでください。 管理 管理者アカウントには、ユニークで複雑（つまり多くの文字）なパスフレーズを使用してください。 CVE-2020-8816 完全な...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Mode Of Use root@kitploit: ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE 已认证的低权限用户可以利用命令注入漏洞，以 www-data 身份实现代码执行，并凭借薄弱的 sudo 规则将权限提升至 root。 QuickBox Pro v2.1.8 及更早版本存在漏洞。...

copy-fail-CVE-2026-31431-php

CVE-2026-31431（复制失败）PHP PoC root@kitploit: www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php...

CVE-2020-11108-PoC

CVE-2020-11108-PoC 本仓库包含两个PoC。cve-2020-11108-rce.py 会以www-data用户身份为你提供一个shell。root-cve-2020-11108-rce.py 会为你提供一个shell并提升权限至root。注意：此操作具有破坏性，因为我们必须覆盖teleporter.php。 如需完整的解释/分析，请参阅此篇博客文章。...

zoneminder-rce-poc

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

CVE-2026-55676

Malcolm’s file-upload PHP backend allows unrestricted uploads: an empty allow-list means any extension is accepted, and the filename sanitizer preserves .php. Uploaded files land under /var/www/upload/server/php/files and are served via nginx to php-fpm, enabling an authenticated GET to execute t...

CVE-2026-55676

Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...

PT-2026-70903

Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...

Unraid < 7.3.0 Multiple Command Injection Vulnerabilities (ZDI-26-385 / ZDI-26-386)

The remote host is running a version of Unraid prior to 7.3.0. It is, therefore, affected by multiple vulnerabilities: - A command injection vulnerability exists in the FileUpload.php file due to the lack of proper validation of a user-supplied string before using it to execute a system call. An...

EUVD-2026-39108

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within FileUpload.php. T...

CVE-2026-9773

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within ToggleState.php...

CVE-2026-9772 Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within FileUpload.php. T...

PT-2026-52119

Name of the Vulnerable Software and Affected Versions Unraid Web Server affected versions not specified Description A command injection flaw in the FileUpload.php file allows authenticated remote attackers to execute arbitrary code in the context of the www-data user. The issue is caused by...

EUVD-2026-23942

Vvveb CMS v1.0.8 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. Attackers can exploit this logic flaw by first...

CVE-2026-6257 Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management

Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. Attackers can exploit this logic flaw by firs...