CVE-2025-60787-MotionEye-RCE

CVE-2025-60787: Motioneye Esecuzione Remota di Codice RCE Proof-of-Concept PoC professionale per CVE-2025-60787, una vulnerabilità critica di Esecuzione Remota di Codice RCE in MotionEye versioni ≤ 0.43.1b4. Panoramica tecnica La vulnerabilità deriva da un bypass della validazione lato client nel...

CVE-2026-63223-POC

CVE-2026-63223 PoC — RCE tramite upload di file in CodeIgniter 4 CVSS 9.8 Critico | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 : Upload senza restrizioni di file con tipo pericoloso Corretto in : CodeIgniter 4 v4.7.4 Avviso di sicurezza : GHSA-mmj4-63m4-r6h5 Riassunto della vulnerabilità Le rego...

Writing-Sample-1

Log4j：CVE-2021-44228 Log4j 漏洞及缓解措施概述 目录 1. 执行摘要 2. 识别易受攻击的端点和服务 3. 缓解措施 A. 在边界处阻止 B. 在服务器端点上安装端点检测与响应 EDR C. 将易受攻击的企业应用置于 F5 之后 4. 资源与延伸阅读 执行摘要 Log4j 是许多 Java 应用程序中使用的日志记录工具。2021年12月，Apache 披露了一个远程代码执行 RCE 漏洞，拥有修改日志配置文件权限的攻击者可借此构造并执行恶意代码。据 Apache 称，Log4j2 版本 2.0-beta7 至 2.17.0 均受到该 RCE 漏洞的影响。NIST...

CVE-2021-44228

CVE-2021-44228 Пример Пример сборки контейнера с уязвимостью CVE-2021-44228. НЕ ИСПОЛЬЗУЙТЕ НИ ДЛЯ ЧЕГО, КРОМЕ ТЩАТЕЛЬНО КОНТРОЛИРУЕМОГО ТЕСТИРОВАНИЯ БЕЗОПАСНОСТИ. Этот репозиторий содержит пример приложения, которое намеренно использует зависимость с опасной уязвимостью удаленного выполнения код...

CVE-2025-56399

CVE-2025-56399 Exploit di Massa CVE-2025-56399 – Esecuzione di codice remoto in laravel-file-manager v3.3.1. Sfrutta una configurazione errata in Laravel File Manager per caricare e verificare una shell PHP tramite upload di file non autenticato. Installazione Scarica il repository root@kitploit:...

CVE-2025-15545

CVE-2025-15545 Informações Fornecedor: TP-Link Site do fornecedor: TP-Link Modelo: Archer RE605X Versão de hardware: RE605X v3.0 Versão do firmware: RE605XEUV31.1.5 Build 20240905 Endereço de download do firmware: TP-Link Uma cadeia de vulnerabilidades — incluindo o uso de chaves criptográficas...

CVE-2024-3400

Preuve de concept de CVE-2024-3400 uniquement à des fins éducatives. utilisez uniquement sur des serveurs pour lesquels vous avez l'autorisation de tester. Comment-Utiliser dépendances : root@kitploit: $ pip install rich scannez targets.txt : root@kitploit: $ python run.py -f targets.txt -t 10 -...

CVE-2020-14883

http://myq-x.remore:8090/index.php?m=WebServiceMgmt::invoke&p="d":"\\m\":"Wsf\\\\Win\\\\Firewall::delete\","\\p\":"----\\\"|ipconfig+/allC:\\\\Windows\\\\system32\\\\spool\\\\drivers\\\\1.txt||----","\\id\":"1","\\pwd\":"","s":"b75c29ef4a5a3d600d96732b3c5cbed1"...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP रिमोट कोड निष्पादन PoC CVE-2025-59528 को लक्षित करने वाला Flowise संस्करण...

Weggli_rules_SSTIC2023

فيما يلي قائمة منسقة لاستعلامات weggli يمكنك قراءتها واستخدامها واحدة تلو الأخرى، أو تشغيلها دفعة واحدة: الاستخدام: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ هناك ثلاث فئات: 1. الدوال الخطيرة: مثل strcpy, system، وغيرها.. 2. stack : يحاول اكتشا...

php_filter_chain_generator

مولّد سلسلة فلاتر PHP أداة سطر أوامر لتوليد سلسلة فلاتر PHP؛ احصل على RCE دون رفع ملف إذا كنت تتحكم بالكامل في المعامل المُمرَّر إلى require أو include في PHP! الاستخدام المساعدة root@kitploit: $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN...

EUVD-2026-66761

Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF Écriture Arbitraire de Fichier vers RCE – Processus de Déduction et Réflexions Périmètre d'application : Utilisation uniquement sur des environnements de test locaux, des environnements de reproduction autorisés, pour la validation de...

Zerologon

Zerologon Code d'exploitation pour CVE-2020-1472 alias Zerologon...

CVE-2018-1270

CVE-2018-1270 CVE-2018-1270 Environnement d'expression RCE...

CVE-2025-55182-Scanner

CVE-2025-55182 - Scanner RCE pour React Server Components Une boîte à outils complète de tests de sécurité pour CVE-2025-55182, une vulnérabilité critique d'exécution de code à distance sans authentification préalable dans les React Server Components. 🎓 NOUVEAU : Guide pédagogique complet...

CVE-2019-8985

firmware et exp pour l'étude de CVE–2019–8985 Netis WF2411 RCE :...

CVE-2020-5902-POC-EXP

CVE-2020-5902-POC-EXP Como usar root@kitploit: python3 f5rce.py scan iplisttxt python3 f5rce.py https://test.cn:443 ifconfig Modo de varredura Modo RCE...

CVE-2025-32432

🔐 CVE-2025-32432 — Craft CMS RCE Pre-Auth Esecuzione di codice remoto pre-autenticazione in Craft CMS Scoperta e sviluppata daMohammed Idrees Banyamer 📌 Panoramica CVE-2025-32432 è una vulnerabilità critica di esecuzione di codice remoto RCE pre-autenticazione che colpisce diverse versioni di Cra...