Bash-exploit-for-CVE-2022-0739

Bash exploit for CVE-2022-0739 Unauthenticated SQL Injection for BookingPress 1.0.11. root@kitploit: Usage: ./exploit.sh options Options: -u, --url VALUE Set the URL ex: http://example.com required -e, --event-dir VALUE Set the event directory ex: events -h, --help Display this help message...

PoC-for-ME-SAML-Vulnerability

PoC-for-ME-SAML-Vulnerability PoC for cve-2022-47966 To test, send it to /SamlResponseServlet as POST Request. Base64 encode it and give it as value to SAMLResponse Parameter and send. Format POST /SamlResponseServlet HTTP/1.0 Host: SAMLResponse=&RelayState=...

CVE-2022-31144

CVE-2022-31144 CVE-2022-31144 DoS en Redis. RCE aún no terminado...

CVE-2022-24637

CVE-2022-24637 Fixed exploit for CVE-2022-24637 original xplt: https://www.exploit-db.com/exploits/51026...

CVE-2022-22947

Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

CVE2022-1388_TestAPI

CVE2022-1388TestAPI A Test API for testing the POC against CVE-2022-1388 To run from host. root@kitploit: pip install -r requirements.txt uvicorn main:app --reload To run from Docker. root@kitploit: make build make run...

spring-cloud-gateway-rce

Ejecución de comandos por inyección de expresión SpEL en la API Actuator de Spring Cloud Gateway CVE-2022-22947 1. Instalación root@kitploit: pip3 install -r requirements.txt 2. Uso root@kitploit: $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ ...

MSDT-0-Day-CVE-2022-30190-Poc

此存储库没有 README。...

Apache-spark-CVE-2022-33891

Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC 关注我们 Vulnmachines平台 YouTube Twitter Facebook LinkedIn...

Webmin-CVE-2022-0824-Enhanced-Exploit

Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Webmin CVE-2022-0824 Enhanced Exploit Tool - Supports dual modes: command execution and reverse shell !IMPORTANT An enhanced exploit tool targeting Webmin CVE-2022-0824, supporting both direct command execution and reverse shell modes. 🚀 Features ✅...

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

dirtypipez-exploit

Exploit DirtyPipe CVE-2022-0847. Crédito: Max Kellermann [email protected] Una nueva vulnerabilidad de Linux conocida como 'Dirty Pipe' permite a usuarios locales obtener privilegios de root a través de exploits disponibles públicamente. Hoy, el investigador de seguridad Max Kellermann divul...

CVE-2022-41333

CVE-2022-41333 https://medium.com/@0xpolar/cve-2022-41333-71eb289d60b5...

CVE-2023-28252-Compiled-exe

CVE-2023-28252 - Ejecutable compilado Una modificación del excelente exploit de escalada de privilegios CVE-2023-2852 de Fortra. Funciona en Windows 11 21H2 con clfs.sys versión 10.0.22000.1574, también funciona en Windows 10 21H2, Windows 10 22H2, Windows 11 22H2 y Windows Server 2022. Esta...

magento2-template-filter-patch

Parche del Filtro de Plantillas de Magento 2 para CVE-2022-24086, CVE-2022-24087 Parche de Magento 2 para CVE-2022-24086, CVE-2022-24087. Corrige la vulnerabilidad RCE y los errores relacionados mediante un escape profundo de variables de plantilla. Si no puede actualizar Magento o no puede aplic...

CVE-2022-44118-Exploit

This repository does not have a README...

CVE-2022-28368-handler

CVE-2022-28368-handler Este repositorio contiene un script de Python que manejará la mayor parte del exploit de fuente cacheada de dompdf CVE-2022-28368, solo necesitas crear la solicitud. Incluso proporcionará una cadena de activación para iniciar el exploit : Usage root@kitploit: usage:...

exploit-CVE-2022-36779

authenticated Command Injection for CVE-2022-36779 enjoy :...

apache__uima-uimaj_CVE-2022-32287_3-3-0

Welcome to the Apache UIMA Java SDK Apache UIMA helps you managing unstructured data such as texts that is enriched useful information. For example, if you want to identify a mention of an entity in a text or possible link that entity to a reference dataset, then Apache UIMA provides: a convenien...

Block-Spring4Shell

Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...