CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...

CVE-2025-55182-Exploit

CVE-2025-55182 – Exploit de RCE en React Server Components ⚠️ Aviso: Solo para pruebas de seguridad autorizadas y fines de investigación. No lo utilice contra sistemas sin permiso explícito. Descripción general Esta es una versión mejorada del script de exploit para la vulnerabilidad de ejecución...

CVE-2021-36394

CVE-2021-36394 Update table or Change password Admin: Custom Code $newpassword = "Accounttakedover123"; Then Execute: $ CVE2021-36394.php http://victim/pathtomoodle Execute function Custom Code $function = "header"; $param = "Hacked: by0d0ff9"; Then Execute: $ CVE2021-36394RCE.php...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Implementación de Impacket del PoC de PrintNightmare creado originalmente por Zhiniang Peng @edwardzpeng y Xuefeng Li @lxf02942370 Probado en un Controlador de Dominio 2019 completamente parcheado Ejecutar DLL maliciosas de forma remota o local Actualización de parc...

CVE-2021-32708

CVE-2021-32708 Las versiones afectadas de este paquete son vulnerables a una condición de carrera. La normalización de espacios en blanco utilizada en las versiones 1.x y 2.x elimina cualquier espacio en blanco Unicode. Bajo ciertas condiciones específicas, esto podría permitir que un usuario...

CVE-2021-29267

CVE-2021-29267 SherlockIM ChatBot XSS Suggested description: SherlockIM es vulnerable a XSS persistente. Additional Information: SherlockIM - Plataforma para gestionar todo tipo de conversaciones con clientes. Vulnerability Type: Cross Site Scripting XSS Se envió una carta al proveedor sobre la...

n8n-CVE-2025-68613-TryHackMe

TryHackMe Room: n8n: CVE-2025-68613 Player: J4ck3LSyN Host: ... Username: [email protected] Password: Try12345! Methodology Payload: function return this.process.mainModule.require'childprocess'.execSync'cat flag.txt'.toString Payload 2: function return...

CVE-2019-7069-POC

Kibana ⚠️ Disclaimer: This script is for educational and authorized penetration testing only. Do not use it on systems you do not own or have explicit permission to test. The author and contributors are not responsible for any misuse or damage caused by this tool. 🎯 What is this? This is a Python ...

CVE-1999-1053-PoC

CVE-1999-1053 Proof-of-Concept Exploit Background This Proof-of-ConceptPoC exploit is inspired from a CTF web challenge called CVE 1999 in HKCERT CTF 2022. Writeup link Information Description: In Matt Wright Guestbook The Matt Wright guestbook.pl = v2.3.1 CGI script contains a flaw that may allo...

CVE-2023-42789

CVE-2023-42789 Vulnerability Checker Installation To use this vulnerability checker, make sure you have Python3 and lib colorama installed. root@kitploit: pip3 install colorama root@kitploit: python3 check.py IP PORT Description CVE-2023-42789 is an out-of-bounds write vulnerability affecting...

CVE-2025-55182

React2Shell CVE-2025-55182 ⚠️ Advertencia: Este proyecto es solo para fines educativos y de investigación en seguridad. 1. clonar el repositorio root@kitploit: git clone https://github.com/mivmi/CVE-2025-55182.git cd CVE-2025-55182 2. iniciar los contenedores docker root@kitploit: docker-compose...

CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION

CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Ejemplo:...

goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

Goahead webserver pre v5.1.5 PoC de RCE CVE-2021-42342 Un error reciente en Goahead Webserver fue descubierto por William Bowling que conduce a RCE en el servidor explotado. El problema existe en versiones anteriores a la 5.1.5 que, según Shodan, cubren alrededor de 2.8 millones de servidores en...

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - Vulnerabilidades de Cross-site scripting XSS en attendancereport Descripción : La vulnerabilidad de Cross Site Scripting en Simple Student Attendance System v.1.0 permite a un atacante remoto ejecutar código arbitrario mediante un payload...

kernel: ipv6: fix possible UAF in icmpv6_rcv()

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Reproducing ProxyShell Exploit https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ This is NOT your Cyberweapon just a experimental PoC...

react2shell-poc-CVE-2025-55182

React2Shell PoC CVE-2025-55182 Un script de prueba de concepto PoC para React2Shell CVE-2025-55182, una vulnerabilidad crítica de ejecución remota de código RCE que afecta a aplicaciones Next.js que utilizan Server Actions. !WARNING Aviso legal : Esta herramienta es solo para fines educativos y d...