CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10

CVE-2026-25130 – Cybersecurity AI CAI Framework Argument Injection / OS Command Injection PoC Author: Mohammed Idrees Banyamer Country: Jordan GitHub: https://github.com/yourusername Instagram: @banyamersecurity Overview This repository contains a Proof of Concept PoC demonstrating an argument...

RevealJS postMessage <4.3.0 - Cross-Site Scripting

RevealJS postMessage before 4.3.0 contains a cross-site scripting vulnerability via the document object model. id: CVE-2022-0776 info: name: RevealJS postMessage 4.3.0 - Cross-Site Scripting author: LogicalHunter severity: medium description: RevealJS postMessage before 4.3.0 contains a cross-sit...

lenovo_exec

lenovoexec CVE-2022-3699 with arbitrary kernel code execution capability original exploit: https://github.com/alfarom256/CVE-2022-3699...

CVE-2026-2256-PoC

CVE-2026–2256 PoC Executive Summary A critical command injection vulnerability CVE-2026–2256, CVSS X.X was identified in the Shell tool component of the MS-Agent framework version 1.5.2. The vulnerability arises from improper sanitization of user-influenced input that is passed directly to a shel...

Exploit_CVE-2025-37164

ExploitCVE-2025-37164 ! 本脚本仅供教育目的使用 Exploit for the CVE-2025-37164 描述： 本脚本为影响 HPE OneView 的 CVE-2025-37164 提供了一个简单的利用，可用于验证资产是否存在漏洞。 用法： root@kitploit: git clone https://github.com/LACHHAB-Anas/ExploitCVE-2025-37164.git cd ExploitCVE-2025-37164 pip install requests 运行脚本请使用： root@kitploit: python3...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ This script is...

CVE-2023-36319

CVE-2023-36319 通过修改压缩插件命令，攻击者可以在上传过程中导致服务器执行任意命令。 仅用于授权的安全测试，请勿用于非法目的。违规行为与作者无关。 受影响版本： openupload 稳定版 0.4.3 步骤一 登录后台，点击功能：管理 - 插件 - 压缩 添加新的“command”指令并保存： root@kitploit: POST /index.php HTTP/1.1 Host: www.test.com Content-Length: 183 Cache-Control: max-age=0 Sec-Ch-Ua: "Not.A/Brand";v="8",...

CVE-2024-13346

CVE-2024-13346 Avada 主题 7.11.14 - 未经认证的任意短代码执行 CVE-2024-13346 漏洞利用脚本 安装代码 root@kitploit: git clone https://github.com/tausifzaman/CVE-2024-13346.git root@kitploit: cd CVE-2024-13346 root@kitploit: pip install -r requirements.txt root@kitploit: python3 exploit.py Google Cloud Console Cloud Shell...

CVE-2022-1292

CVE-2022-1292 POC Descripción root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

CVE-2017-1000117

CVE-2017-1000117 此模块可用于测试你是否易受 CVE-2017-1000117 漏洞影响 root@kitploit: git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 如果你存在漏洞，输出如下： root@kitploit: $ git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules Cloning into...

CVE-2025-26055

CVE-2025-26055 Descrição da CVE Autor : Rohan Deshpande OS Command Injection Resumo A injeção de comando no sistema operacional é uma vulnerabilidade de segurança que permite a um atacante executar comandos arbitrários no sistema operacional do host através de uma aplicação vulnerável. Isso pode...

CVE-2016-2434

CVE-2016-2434...

CVE-2024-27130

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 우리는 테러 단체 하마스에 의해 인질로 잡힌 모든 시민의 안전한 귀환을 요구합니다. 모든 인질이 석방되어 안전하게 집으로 돌아올 때까지 우리는 멈추지 않을 것입니다. 그들을 집으로 데려오는 데 도움을 줄 수 있습니다.https://stories.bringthemhomenow.net/ QNAP QTS CVE-2024-27130 PoC 🔒 이 저장소에는 QNAP QTS에 영향을 미치는 취약점 CVE-2024-27130을 악용하기 위한 개념 증명PoC 스크립트가 포함되어...

CVE-2024-24576.jl

CVE-2024-24576 PoC in Julia root@kitploit: λ julia main.jl Enter arguments: hello Output: Argument received: hello root@kitploit: λ julia main.jl Enter arguments: hello & whoami Output: Argument received: "hello & whoami" root@kitploit: λ julia main.jl Enter arguments: hello" & whoami Output:...

CVE-2025-8088

CVE-2025-8088 WinRAR: path traversal in WinRAR che consente l'esecuzione di codice arbitrario CVE-2025-8088 CVE-2025-8088 PoC - Exploit Furtivo - README Inglese US CVE-2025-8088 PoC - Esplorazione Furtiva - README Portoghese BR -...

CVE-2014-4688-pfsense

CVE-2014-4688 – Injeção de Comandos no pfSense Prova de conceito modificada do Exploit-DB para CVE-2014-4688 injeção de comandos no pfSense via statusrrdgraphimg.php Visão Geral Este repositório contém uma versão modificada da prova de conceito original do Exploit-DB para CVE-2014-4688 , que afet...

CVE-2020-7247-reproducer

CVE-2020-7247 OpenSMTPD जानकारी इस रिपॉजिटरी में एक Docker इमेज बनाने के लिए आवश्यक फ़ाइलें शामिल हैं, जिसमें OpenSMTPD 6.6.1p1 का एक असुरक्षित वातावरण है। यह भेद्यता एक हमलावर को विशेष रूप से तैयार किए गए SMTP सत्र के माध्यम से, विशेष रूप से MAIL FROM फ़ील्ड में, मनमाने कमांड निष्पादित करने की...

CVE-2017-12636

Couchdb-Schwachstelle zur Ausführung beliebiger Befehle CVE-2017-12636...

CVE-2021-22204

CVE-2021-22204 Vulnerabilità Esecuzione arbitraria di comandi in exiftool Utilizzo 1. Imposta l'IP e la porta per ricevere la reverse shell nel file exploit.py, quindi esegui docker compose up 2. Accedi alla shell di docker e, nella directory /root, esegui python3 exploit.py per generare il file...

CVE-2025-29278

CVE-2025-29278 Proof of Concept PoC: Nella scheda Diagnostica, vai allo strumento Tracert e, nel campo Host Address, inserisci un indirizzo IP valido seguito da un punto e virgola ; e il comando desiderato. Questa iniezione consente l'esecuzione arbitraria di comandi sul sistema. Esempio di...