CVE-2019-12840.py

CVE-2019-12840.py POC Fake Shell: CVE-2019-12840 Authentifiziertes RCE – Webmin-Paketaktualisierungen...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

CVE-2023-51385_poc-test

CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH 9.6 poc della vulnerabilità di command injection Cinese 1.vim /.ssh/config o modifica C:/Users/username/.ssh/config su sistema Windows root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 2. git clone...

CVE-2018-16763

CVE-2018-16763 Fuel CMS 1.4.1 - Esecuzione di codice remoto - Python 3.x Script originale: Exploit-DB...

Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013

Ricognizione e Sfruttamento: Vulnerabilità del Server HTTP Apache - CVE-2021-41773 e CVE-2021-42013 In questo progetto, ho documentato un processo dettagliato di penetration testing mirato alle vulnerabilità del server HTTP Apache, in particolare CVE-2021-41773 e CVE-2021-42013, che coinvolgono...

Linksys-WRT54GL-Exploitation

Dalla Saldatura alla Shell: Sfruttamento Hardware Completo del Router Linksys WRT54GL CVE-2022-43973 Un percorso di ricerca sulla sicurezza embedded in 10 fasi — dalla scoperta dei pin JTAG all'esecuzione remota di codice su un router consumer basato su MIPS. | ---|--- Autore| Umberto Della Monic...

Torito-R2S

Torito React2Shell Scanner- & Exploit-Tool CVE-2025-55182 / 66478 Erkennungsorientierter Scanner für Next.js-RSC-Ziele mit optionaler PoC-Bestätigung sowie Exploit-/Shell-Modi. Nur auf Systemen verwenden, für die Sie autorisiert sind, Tests durchzuführen. Anforderungen Python 3.9+ pip install -r...

CVE-2019-9978-Social-Warfare-WordPress-RCE

🚀 CVE-2019-9978 – Social Warfare WordPress Plugin RCE ⚠️ HAFTUNGSAUSSCHLUSS: Dieses Repository dient nur zu Bildungs- und autorisierten Sicherheitstests. Verwenden Sie es nur auf Systemen, die Ihnen gehören oder für die Sie eine ausdrückliche schriftliche Genehmigung zum Testen haben. Unbefugter...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit Dieses Repository enthält einen Rust-basierten Exploit für die Schwachstelle CVE-2022-22963, die in Spring Cloud Function Versionen 3.1.6, 3.2.2 und älteren, nicht unterstützten Versionen gefunden wurde. Die Schwachstelle ermöglicht die Ausführung von Remote-Code und den...

React4Shell

React2Shell Exploit Proof of Concept PoC für React Server Components RSC / Next.js Remote Code Execution-Schwachstelle. Beschreibung Eine vor der Authentifizierung ausnutzbare Schwachstelle zur Remote-Code-Ausführung besteht in React Server Components Versionen 19.0.0, 19.1.0, 19.1.1 und 19.2.0,...

spring-shell-vuln

spring-shell-vuln Spring4Shell: Vulnerabilità RCE di Spring Core Spring ha confermato la RCE nel framework Spring. Il team ha appena pubblicato la dichiarazione insieme alle guide di mitigazione per il problema. Ora, questa vulnerabilità può essere tracciata come CVE-2022-22965. Alcune informazio...

MiniExploit

MiniExploit WebMin Versioni...

CVE-2022-28368-handler

CVE-2022-28368-handler Questo repository contiene uno script Python che gestisce la maggior parte dell'exploit del font cache di dompdf CVE-2022-28368, tutto ciò che devi fare è creare la richiesta. Fornirà anche una stringa trigger per avviare l'exploit : Utilizzo root@kitploit: usage:...

Android-vulnerability-exploitation

Android-vulnerability-exploitation Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolut, ich wähle immer Linux-Schwachstellen, aber dann musste ich eine andere Schwachstelle wählen, weil ich nicht wusste, dass zwei Personen dasselbe tun konnten. Und nachdem ich davon...

text4shell-exploit

text4shell-exploit Un exploit proof-of-concept PoC personalizzato basato su Python che mira a Text4Shell CVE-2022-42889, una vulnerabilità critica di esecuzione remota di codice in Apache Commons Text versioni 1.10. Questo exploit mira a applicazioni Java vulnerabili che utilizzano la classe...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

GStreamer: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...