62070 matches found
chaos-client
Chaos Client Chaos ćć¼ćæć»ćć API ćØéäæ”ććććć® Go ćÆć©ć¤ć¢ć³ćć English ā¢ äøę ć¤ć³ć¹ćć¼ć« root@kitploit: go install -v github.com/projectdiscovery/chaos-client/cmd/chaos@latest ä½æēØę¹ę³ root@kitploit: chaos -h ććć«ćććć¼ć«ć®ćć«ććč”Øē¤ŗććć¾ćć仄äøćÆććć¼ć«ććµćć¼ććććć¹ć¦ć®ć¹ć¤ććć§ćć root@kitploit: -key string projectdiscovery cloud pdcp api key -d...
cve-2024-26229
cve-2024-26229 A nim version of the now outdated Windows LPE vulnerability abusing CSC. This is for educational purposes only, and refer to the patch list to determine whether or not your system/your target is vulnerable. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 Usage...
CVE-2025-63572
Description A SQL injection vulnerability was discovered in the endpoint responsible for searching for platform clients Zentrajuris v.1.0. User input sent to the search parameter is concatenated directly into a SQL query without proper sanitization/parameterization, allowing the attacker to...
suds
OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...
velociraptor_CVE-2025-6264_PoC
CVE-2025-6264 DISCLAIMER: This is an educational research project. I did not discover this vulnerability. This repository demonstrates CVE-2025-6264 for learning purposes Affected versions before 0.74.3 Affects Windows, MacOS and Linux The Admin.Client.UpdateClientConfig artifact is missing...
bepr
bepr bepr is a tiny authenticated client/server reverse shell program over outbound WebSocket connections. A single binary cover all 3 mode: server mode, client mode, and user mode. It is packaged with installation direction for rpm, deb, and pkg, it comes in 1MB. I created bepr because I'm...
CVE-2026-67231
A flaw was found in RabbitMQ. The trust-store plugin incorrectly validates client certificates by only matching the issuer name and serial number, rather than using the full certificate for path validation. This allows a remote attacker, who knows the issuer name and serial number of a whiteliste...
cve-2022-0778
cve-2022-0778 bad server root@kitploit: go run server/main.go --addr 127.0.0.1:12345 cd test && testserver.sh docker stat bad client root@kitploit: cd test && testclient.sh go run client/main.go --network tcp --addr 127.0.0.1:12345 docker stat build root@kitploit: docker build -t cve-2022-0778...
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-
CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Modified to get Reverse Shell with system privileges...
When Business Email Compromise Starts Rewriting Reality
Business Email Compromise BEC operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series aroun...
CVE-2025-65753
CVE-2025-65753 Proof of concept for CVE-2025-65753: Remote code execution on the Gryphon Guardian access point, firmware version 01.06.0006.22, through an improper TLS certificate validation. Description The Gryphon Guardian WiFi access point, with firmware version 01.06.0006.22, does not properl...
CVE-2021-21985_PoC
Vulnerability Details VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with...
CVE-2023-44487-
CVE-2023-44487- 1- Install Go. 2- Run the server on one seperate machine server.go file 3- Execute the main.go file on a separate machine. Note: main.go contains the attack code. 4. Specify the IP address of the target. 5- Define the number of requests: run main.go -requests 5000...
tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-
Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ and https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...
CVE-2020-28488
CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload root@kitploit: for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i...
kernel: smb: client: fix double-free in SMB2_flush() replay
A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error within the SMB2flush replay mechanism, occurs when the system attempts to free a memory buffer twice. A malicious SMB server could exploit this by sending a specially crafted flush...
CLEANSTART-2026-QY50458 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
Security vulnerability affects the fluent-operator package. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface...
CVE-2026-66077
A flaw was found in RabbitMQ. This vulnerability, a stored Cross-Site Scripting XSS, exists in the management UI. An attacker who can obtain a trusted TLS client certificate can embed malicious JavaScript in the certificate's Subject Distinguished Name DN. When the TLS listener is configured for...
kernel: smb: client: fix double-free in SMB2_flush() replay
A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error within the SMB2flush replay mechanism, occurs when the system attempts to free a memory buffer twice. A malicious SMB server could exploit this by sending a specially crafted flush...
Blackash-CVE-2025-33073
āØ CVE-2025-33073: Windows SMB RCE Vulnerability šØ š„ High-Severity Authenticated Remote Code Execution š„ Improper Access Control in Windows SMB Client CWE-284 š”ļø Key Details at a Glance...