9397 matches found
CVE-2024-41651
Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...
HQLmap
HQLMap This project has been created to exploit HQL Injections. The tool has been written in Python and is released under MIT License. Future development : I have in mind to develop specific module for SQLmap. Where can you try the tool ? If you want a fast vulnerable environment where you can tr...
CVE-2020-8163
CVE-2020-8163 Enviroment and exploit to CVE-2020-8163 Blind remote code execution of user-provided local names in Rails 5.0.1 and 4.2.11.2 Create the enviroment 1. create docker container mapping port 4000 to 8001 root@kitploit: sudo docker run --rm -it -p 8001:4000 ruby:2.3 bash 2. update and...
CVE-2024-23746
CVE-2024-23746 Miro Desktop 0.8.18 on macOS allows Electron code injection. PoC signature and version: tool used to explore the vulnerability: https://github.com/r3ggi/electroniz3r verify if is vulnerable: inject a Blind Shell: References...
xcat
XCat XCat es una herramienta de línea de comandos para explotar e investigar vulnerabilidades de inyección XPath ciega. Para una referencia completa, lee la documentación aquí: https://xcat.readthedocs.io/en/latest/ Soporta una gran cantidad de características: Selecciona automáticamente...
xcat
XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...
CVE-2022-3590-WordPress-Vulnerability-Scanner
CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...
CVE-2026-49772
The Events Calendar SQL Injection CVE-2026-49772 PoC Description CVE-2026-49772 is an unauthenticated blind SQL injection in the WordPress plugin The Events Calendar. A broken REST parameter validator validatecallback returns a closure instead of validating lets the order parameter on the...
CVE-2023-42284
Disclaimer For educational purpose only! Details Proof of concept for CVE-2023-42284. Tyk Gateway is vulnerable to SQL injection. Fixed in 5.0.7 version. The URL parameter ‘apiversion’ of the "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..."is vulnerable to Blind SQL injection...
WordPress-NotificationX-CVE-2024-1698
Set-up root@kitploit: docker-compose up --build Clean up root@kitploit: docker-compose down Testing root@kitploit: Measure-Command curl.exe http://localhost/wp-json/notificationx/v1/analytics -Method Post -Body 'nxid=1337&type=clicks=IFASCIISUBSTRINGselect userpass from wpusers where...
WordPress-6.9.1-Blind-SSRF
WordPress-6.9.1-Blind-SSRF The exploit has no cve assigned. Affected Versions 6.8 - 6.8.3 6.9 - 6.9.1 WordPress = 6.9.1 - Unauthenticated Blind SSRF via XML-RPC Pingback Discovery proof of concept PoC Usage 1. Install requests if not yet installed pip install requests 2. Change config variables...
CVE-2022-21661-Demo
This repository demonstrates a vulnerability in WordPress 5.8.2, in which missing sanitization in class-wp-tax-query.php can, in very specific situations, allow attackers to perform SQL injection. Note that successful exploitation requires developers to add vulnerable code to the WordPress...
CVE-2019-9053
CVE 2019-9053 Detail Description This code is an implementation of a Time-Based Blind SQL Injection attack in Python 3. The attack is designed to exploit a SQL injection vulnerability in a Content Management System CMS Made Simple 2.2.8 through an HTTP request. Exploit Use: root@kitploit:...
cve-2017-12945
CVE-2017-12945 Exploit for CVE-2017-12945 A remote authenticated blind OS command injection vulnerability exists in Mersive Solstice Pods - a wireless collaboration and presentation platform designed by Mersive Technologies Inc. - running versions of the firmware prior to 2.8.4, as...
drupal-cve-2026-9082-checker
DRUPAL CVE-2026-9082 CHECKER Drupal CVE-2026-9082 Blind SQL Injection Checker Installation root@kitploit: git clone https://github.com/N45HT/drupal-cve-2026-9082-checker.git cd drupal-cve-2026-9082-checker pip install -r requirements.txt References https://vulners.com/cve/CVE-2026-9082...
CVE-2026-88890
OpenPanel through commit cd24bb8 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile. filter column identifiers before interpolating them into ClickHouse WHERE clauses. An authenticated attacker with project-scoped read or root export credentials...
blindy
Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...
duct
Pown Duct Essential tool for finding blind injection attacks using DNS side-channels. Credits This tool is part of secapps.com open-source initiative. root@kitploit: / | / | /\ | \ / | \ \ | / | / /\ \ |/// \| || |/ https://secapps.com NB : This tool is taking advantage of http://requestbin.net...
CVE-2026-60137-WordPress-Core-SQL-Injection-PoC
CVE-2026-60137 — WordPress Core SQL Injection PoC Non-destructive proof-of-concept and verification harness for CVE-2026-60137 , a blind SQL injection in WordPress core WPQuery::authornotin, reachable via the REST API's authorexclude parameter. Root Cause WPQuery::getposts builds SQL by...