516483 matches found
CVE-2023-38831-winrar-expoit-simple-Poc
CVE-2023-38831-winrar-expoit-simple-Poc 非常重要 我希望你先看这个链接 https://github.com/b1tg/CVE-2023-38831-winrar-exploit 我没有编写完整的漏洞利用程序。 他编写了漏洞利用程序 。 https://github.com/b1tg 他所做的只是修改了一些简单的东西，以通过 script.bat 文件获得一个反向 Shell 如何运行 python cve-2023-38831-exp-gen.py 别忘了修改 ip 和端口的值 使用任何 pdf、png 或 jpg 文件 POC 文件 .pdf...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...
exploit-workshop
exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...
CVE-2023-46604
CVE-2023-46604 Exploit for CVE-2023-46604 This tool helps to exploit this vulnerability. Shodan Query to find target: root@kitploit: product:"ActiveMQ" port:"61616" Tools Usage: root@kitploit: for read targets from the file: python3 exploit.py -f targets -c http://YourVPS/poc.xml --- single targe...
httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc
A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...
httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass
A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...
Important: Red Hat Security Advisory: httpd security update
An update for httpd is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration
A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...
Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow
A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...
CVE-2023-42793
CVE-2023-42793 For educational purposes only PoC for CVE-2023-42793 Usage CVE-2023-42793admin.sh: root@kitploit: chmod +x CVE-2023-42793admin.sh ./CVE-2023-42793admin.sh ip/domainname port Proof of working: Usage CVE-2023-42793rce.sh: root@kitploit: chmod +x CVE-2023-42793rce.sh...
CVE-2020-14295
CVE-2020-14295 CVE-2020-14295 概念验证。原始帖子位于 exploit-db。 安装依赖 root@kitploit: python3 -m pip install -r requirements.txt 用法 root@kitploit: $ python3 cactisqlirce.py --help usage: cactisqlirce.py -h -t -u -p --lhost --lport Cacti 1.2.12 - SQL Injection / Remote Code Execution optional arguments: -h,...
CVE-2022-24112
CVE-2022-24112 Apache APISIX batch-requests RCECVE-2022-24112 root@kitploit: 将目标放入url.txt python3 ApacheAPISIXRCECVE-2022-24112.py Cmd:...
CVE-2020-35682
CVE-2020-35682 SD-91948: CVE-2020-35682: Authentication Bypass Vulnerability during SAML login in ServiceDesk Plus. As described by ManageEngine. If the target ServiceDesk Plus 11134 installation has SAML login enabled and you have credentials to a low privilege user then you can escalate to...
CVE-2025-24813-Exploit
CVE-2025-24813-Exploit Apache Tomcat リモートコード実行 RCE エクスプロイト - CVE-2025-24813 🚀 Apache Tomcat RCE エクスプロイト - CVE-2025-24813 🔥 Apache Tomcat RCE CVE-2025-24813 用エクスプロイト & 検出ツール このリポジトリには、Apache Tomcat リモートコード実行 RCE 脆弱性 - CVE-2025-24813 に対するPoC Proof of Concept エクスプロイト が含まれています。...
CVE-2025-6218-POC
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...
CVE-2025-25257
CVE-2025-25257 CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s Fabric Connector component. It impacts FortiWeb versions: 7.6.0–7.6.3 7.4.0–7.4.7 7.2.0–7.2.10 ≤ 7.0.10 Technical Details The issue resides in the getfabricuserbytoken function...
CVE-2018-17463
CVE-2018-17463 针对 CVE-2018-17463 的工作概念验证漏洞利用，使用 WebAssembly RWX 页面执行 Shellcode。 CVE-2018-17463 源于 Google Chrome 70.0.3538.64 之前版本中 V8 的错误副作用注释，允许远程攻击者通过精心制作的 HTML 页面在沙箱内执行任意代码。 此概念验证与以下博客文章直接相关： Chrome 浏览器漏洞利用，第 1 部分：V8 和 JavaScript 内部原理介绍 Chrome 浏览器漏洞利用，第 2 部分：Ignition、Sparkplug 及通过 TurboFan 进行...
CVE-2014-6271
CVE-2014-6271 「ShellShock」として知られる脆弱性が、GNU Bash 4.3 以前に存在します。これは、関数定義の後に環境変数の値へ付加される末尾の文字列の処理方法に起因します。この脆弱性により、リモートの攻撃者は、特定の状況下で環境を細工することで任意のコードを実行できます。これには、Bash の実行時に特権境界をまたいで環境が設定される場合も含まれます。この脆弱性は、OpenSSH sshd の ForceCommand 機能、Apache HTTP Server の modcgi モジュールと modcgid モジュール、および不特定の DHCP...
CVE-2017-5638
CVE-2017-5638 Apache Struts 2 のバージョン 2.3.32 より前の 2.3.x、および 2.5.10.1 より前の 2.5.x には、Jakarta Multipart パーサーに欠陥があります。この欠陥により、ファイルをアップロードしようとした際に、例外の処理とエラーメッセージの生成が誤って行われます。その結果、攻撃者は Content-Type、Content-Disposition、Content-Length などの巧妙に細工された HTTP ヘッダーを悪用して、任意のコマンドをリモートで実行できます。 実行 python exploit.py -r...