1306108 matches found
CVE-2019-12725-modified-exp
CVE-2019-12725-modified-exp Modified to fix errors and execute commands with higher priviliege, also removed the sleep13 in the original script to save time. references: https://www.modb.pro/db/120391 https://www.exploit-db.com/exploits/49862...
exploit-CVE-2016-9920
Roundcube 1.0.0 = 1.2.2 Remote Code Execution Roundcube is a widely distributed open-source webmail software used by many organizations and companies around the globe. The mirror on SourceForge, for example, counts more than 260,000 downloads in the last 12 months which is only a small fraction o...
CVE-2024-23346-rust-exploit
A Rust exploitation script for CVE-2024-23346. As shown below the POC uses the code injection vulnerability and runs remote shell commands like in a Terminal. poc.webm Steps to run the exploit: Run directly with Cargo cargo run -- --help cargo run -- --target http://10.10.11.38 --username "Admin"...
CVE-2018-4407
CVE-2018-4407 Exploit code for CVE-2018-4407 written in Python using the Scapy API. Usage: 2018-4407.py targetip...
CVE-2017-8759
CVE-2017-8759 CVE-2017-8759 How to use? http://www.lz1y.cn/wordpress/?p=799 Modify cmd.hta file http://192.168.211.149:80 is your phishing domain port Also modify in exploit.txt https://example.com to your phishing domain port...
CVE-2024-32002-hook
CVE-2024-32002-hook...
PowerShell-PrintNightmare
PowerShell-PrintNightmare A collection of scripts to help set the appropriate registry keys for CVE-2021-34527 shared as part of our blogs outlining various mitigation options. servers.ps1 contains the registry settings related to PointAndPrint. You still need to install the patch! workstations.p...
Exim-CVE-2019-15846
Exim CVE-2019-15846 PoC materials to exploit CVE-2019-15846. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC help generate spool files used exploit a heap overflow in exim. Two example spool files are given in 1i7Jgy-0002dD-Pb-D and 1i7Jgy-0002dD-Pb-H. A specialy crafted spoo...
CVE-2026-13753-poc
CVE-2026-13753-poc Summary Certain HP DeskJet printer series is vulnerable to a Missing Authorization vulnerability, when the backend EWS server in the printer has no authorization, which allow attacker to watch all the things that admin can see and the frontend try to protect with request a GET...
CVE-2021-40539
Exploitation code for CVE-2021-40539 Details about exploitation can be found here...
Exim-CVE-2018-6789
Exim CVE-2018-6789 PoC materials to exploit CVE-2018-6789. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC connects to a vulnerable Exim server and exploits CVE-2018-6789. Usage root@kitploit: usage: exploit -hv options: -h, --help Print this help -v, --verbose Enable verbose...
CVE-2021-3492
This repository does not have a README...
CVE-2021-1782
This repository does not have a README...
CVE-2026-87509
CVE-2026-87509 is an incorrect authorization flaw in the Updater component of Google Chrome on Windows , affecting versions prior to 153.0.8010.36 . A local attacker can leverage this to execute arbitrary code outside the sandbox via a local program. Chromium rates the severity as Low , while the...
nftables-oob-read-write-exploit-CVE-2023-35001-
nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage root@kitploit: Build $ make Run $ ./exploit This produces a...
CVE-2020-27950
CVE-2020-27950 CVE-2020-27950 exploit...
Nuclei-Template-CVE-2023-42793.yaml
This repository does not have a README...
CVE-2024-3400-Check
Description 1. Perform a POST request to the /ssl-vpn/hipreport.esp endpoint. 2. Perform a GET request to /global-protect/portal/images/sxy.txt to check if the exploitation allows access to the file, which would typically be forbidden 403 Forbidden status. Prerequisites You need Python 3.6 or new...
aiohttp-exploit-CVE-2024-23334-certstream
Collect domains fromcertstream.calidog.io. Check forPython aiohttp in the response headers. Attempt to exploit CVE-2024-23334 Successful attempts sent to discord via webhook...