145626 matches found
Next.js_exploit_CVE-2024-34351
csr-rsc-ssg-isr-ssr-ssrf This repo can be used as support to present one or more meetups. The path is as follows... "CSR" Client Side Rendering: React as a standard SPA library "RSC" React Server Components: execution of React components only on the server side "SSG" Static Site Generation:...
android_autorooter
Android Autorooter This is just a mental note more than anything to further explore the posibilities of the work done here: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...
CVE-2024-32002-git-rce
This repository does not have a README...
cve-2024-32002-submodule-aw
CVE-2024-32002 Submodule AW A submodule to demonstrate CVE-2024-32002. Demonstrates arbitrary write into .git. See cve-2024-32002-poc-aw for the working POC that utilises this repo. What this repo contains Simply, a random file so that we can detect it when we clone the parent POC repo The file i...
CVE-2024-2961_poc
This repository does not have a README...
Exploit-PoC-para-CVE-2024-30085
🚨 Exploit PoC para CVE-2024-30085 Proof of Concept exploit para la vulnerabilidad de elevación de privilegios CVE-2024-30085. Sólo para propósitos educativos y de investigación en seguridad. ⚠️ Advertencia Legal USO EXCLUSIVAMENTE EDUCATIVO ✅ Investigación de seguridad autorizada ✅ Laboratorios...
revisaxzutils
revisaxzutils Script en bash para revisar si tienes la vulnerabilidad CVE-2024-3094. Instalacion Instalacion rapida para Ubuntu, Kali Linux, Parrot root@kitploit: git clone https://github.com/hackingetico21/revisaxzutils.git cd revisaxzutils chmod +x ./revisaxzutils.sh...
PanOsExploitMultitool
PanOsExploitMultitool Herramienta múltiple de explotación y post-explotación para sistemas Palo Alto PAN-OS afectados por las vulnerabilidades CVE-2024-0012 y CVE-2024-9474 Durante la explotación temprana de las vulnerabilidades de ejecución remota de código CVE-2024-0012 y CVE-2024-9474, obtuve ...
CVE-2024-23897
Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments root@kitploit: usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PRO...
external_sonivox_CVE-2024-23709
This repository does not have a README...
CVE-2024-27956-RCE-File-Package
CVE-2024-27956-RCE File Package Contents: 1. exploit.py Original Creator:https://GitHub.com/diego-tella 2. modifiedexploit.py Modified with an ignore ssl verification option 3. Screenshot 4. wpValvePressplugin.py Python script using URI parameters to search for vulnerable wp plugin...
CVE-2024-1086
CVE-2024-1086...
CVE-2024-21762-Safe-Check
CVE-2024-21762 - Escritura Fuera de Límites en SSL VPN de FortiOS Resumen...
CVE-2024-22120-RCE
CVE-2024-22120 ToolKit Affected Version/s root@kitploit: 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Credit https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premise a low-privilege user Have...
CVE-2024-3094
CVE-2024-3094 I've moved my notes in Obsidian to a separate vault and this GitHub repository to be able to share it. The start page is CVE-2024-3094 xz supply chain. Installation Clone the repo with git. root@kitploit: git clone https://github.com/reuteras/CVE-2024-3094.git Then open the checked...
CVE-2023-46805_CVE-2024-21887
CVE-2023-46805CVE-2024-21887 The script in this repository checks and exploits CVE-2023-46805 Auth Bypass and CVE-2024-21887 Remote Code Execution vulnerabilities specified in the Ivanti Connect Secure product exist. You can check vulnerability details this link...
rcno-reviews
Recencio Book Reviews A WordPress plugin for managing and displaying book reviews. Custom post type, 7 taxonomies, 13 shortcodes, 7 widgets, 6 templates, 5 extensions. All data stored in standard WordPress post meta — no custom tables. Background Recencio Book Reviews was created by Kemory Grubb...
CVE-2024-21733
CVE-2024-21733-POC Nota: 1. entorno en inglés de tomcat 2. código de backend construido específicamente, como se muestra en ROOT/vulnerable.jsp 3. Si es necesario, modifique la dirección del servidor y el puerto en el script. Por defecto 127.0.0.1:8080 4. Tiempo de espera para la activación, por...
traefik-CVE-2024-45410-poc
Shadow Corp CTF Challenge Welcome to the Shadow Corp Capture the Flag CTF challenge! This challenge will test your skills in identifying and exploiting vulnerabilities related to security headers and HTTP proxy behavior. Your mission is to bypass protections and uncover secrets hidden within the...