CVE-2015-1397-Magento-Shoplift

CVE-2015-1397-Magento-Shoplift Vulnerability Details Vulnerability as seen in HackTheBox - SwagShop Stage 1 = exploit.py Gain administrator credentials to Magento CMS dashboard Stage 2 = postauth.py With credentials gained from exploit.py added to postauth.py run: root@kitploit: python3 postauth....

CVE-2024-3400

CVE-2024-3400 PoC 교육 목적으로만 사용하십시오. 테스트 권한이 있는 서버에서만 사용하십시오. 사용 방법 의존성: root@kitploit: $ pip install rich targets.txt 스캔： root@kitploit: $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36... - Checking...

CVE-2018-14772

CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage root@kitploit: $ python exploit.py -h...

Fortinet-CVE-2022-40684

Fortinet-CVE-2022-40684 Tool Introduction Quick exploitation tool for CVE-2022-40684, beginner code, feel free to submit issues if you find any Usage main -t http://127.0.0.1 -u admin -f path-of-ssh-key.pub Disclaimer This tool is only intended for legally authorized enterprise security practices...

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure

An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48166 info: name: Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure author: ritikchaddha...

Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48164 info: name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information...

CVE-2021-22911-rust

CVE-2021-22911 Реализация на Rust для доказательства концепции этой CVE. Используется в рамках https://tryhackme.com/room/rocket, CTF-задачи «boot to root» на обучающей платформе TryHackMe. Для использования обновите константы в main.rs и запустите — всё должно работать сразу. Требуется, чтобы у...

Tenda-F3-V4

Tenda F3 Router Exploit & File Downloader This project is a tool for downloading various files from the Tenda F3 router v3/v4 through an unauthenticated vulnerability CVE-2020-35391. It allows you to get the configuration file, system log, and flash dump from a vulnerable router. Overview The...

CVE-2026-1459-POC

CVE-2026-1459-POC CVE-2026-1459의 POC로, 페이로드가 root SSH 비밀번호를 변경합니다. 유효한 관리자 자격 증명이 필요하며, root 비밀번호를 일시적으로 변경합니다. 재부팅 시 root 비밀번호는 초기화됩니다. VMG3625-T50B 및 유사 모델에서 작동하며, 펌웨어 V5.50ABPM.9.7C0 이하에서 작동이 보장됩니다...

SimpleCTF-UpdatedExploit

CMS Made Simple = 2.2.10 SQL-инъекция Эксплойт Обзор Этот скрипт на Python эксплуатирует уязвимость неаутентифицированной SQL-инъекции в CMS Made Simple = 2.2.10 CVE-2019-9053. Эксплойт извлекает конфиденциальную информацию, такую как соль, имя пользователя, электронная почта и пароль...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 스캐너 - NetScaler 메모리 오버리드 탐지 도구 ⚠️ 경고 이 도구는 교육 및 승인된 테스트 목적으로만 사용됩니다. 소유자의 명시적 허가 없이 시스템에 사용하지 마십시오. 📋 설명 CVE-2026-3055 탐지 도구로, memory overread에 취약한 Citrix NetScaler ADC 및 Gateway 장치를 식별합니다. 개별 스캔, 네트워크 또는 호스트 목록 스캔을 수행하고, /wsfed/passive?wctx 엔드포인트에서 memory leak을 감지하며, 관리자 세션 ID를...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 , a USB Wi-Fi 4 N300 T1 Pro adapter, is vulnerable to cleartext transmission of administration credentials over HTTP . An attacker on the adjacent network can intercept unencrypted admin credentials without requiring prior privileges or user interaction, resulting...

EUVD-2026-74263

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

CVE-2022-3552

CVE-2022-3552 In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling=4.22.1.5" and you will have to have valid admin credentials. If you have the situation above, here are the steps you have to take in order to get the juicy RCE: Create a python virtual...

CVE-2023-23752

CVE-2023-23752 О программе Этот эксплойт представляет собой обход аутентификации, который раскрывает имя пользователя и пароль администратора, а также конфигурацию MySQL: имя пользователя, пароль, хост и базу данных Уязвимые версии только 4.00 = 4.28 Использование root@kitploit: usage: exploit.sh...

CVE-2026-49833 DSpace: Path Traversal possible in LDN message generation

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

CVE-2026-49833 DSpace: Path Traversal possible in LDN message generation

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

mikrot8over

mikrot8over mikrot8over: strumento di sfruttamento rapido per Mikrotik RouterOS fino alla versione 6.38.4 Descrizione Questa è una rielaborazione dell'originale Mikrotik Exploit. Sono state aggiunte la compatibilità con Python 2 e funzionalità di scansione multithreading. Versione Python L'utilit...