1131651 matches found
PHP_8.1.x_Exploit
🚀 PHP CVE Autopilot Rilevamento e sfruttamento automatici di vulnerabilità critiche di PHP CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh è uno strumento di valutazione della sicurezza a file singolo, zero configurazione che rileva automaticamente endpoint...
CVE-2025-60787-MotionEye-RCE
CVE-2025-60787: Motioneye Esecuzione Remota di Codice RCE Proof-of-Concept PoC professionale per CVE-2025-60787, una vulnerabilità critica di Esecuzione Remota di Codice RCE in MotionEye versioni ≤ 0.43.1b4. Panoramica tecnica La vulnerabilità deriva da un bypass della validazione lato client nel...
CVE-2026-63223-POC
CVE-2026-63223 PoC — RCE tramite upload di file in CodeIgniter 4 CVSS 9.8 Critico | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 : Upload senza restrizioni di file con tipo pericoloso Corretto in : CodeIgniter 4 v4.7.4 Avviso di sicurezza : GHSA-mmj4-63m4-r6h5 Riassunto della vulnerabilità Le rego...
Writing-Sample-1
Log4j：CVE-2021-44228 Log4j 漏洞及缓解措施概述 目录 1. 执行摘要 2. 识别易受攻击的端点和服务 3. 缓解措施 A. 在边界处阻止 B. 在服务器端点上安装端点检测与响应 EDR C. 将易受攻击的企业应用置于 F5 之后 4. 资源与延伸阅读 执行摘要 Log4j 是许多 Java 应用程序中使用的日志记录工具。2021年12月，Apache 披露了一个远程代码执行 RCE 漏洞，拥有修改日志配置文件权限的攻击者可借此构造并执行恶意代码。据 Apache 称，Log4j2 版本 2.0-beta7 至 2.17.0 均受到该 RCE 漏洞的影响。NIST...
CVE-2021-44228
CVE-2021-44228 Пример Пример сборки контейнера с уязвимостью CVE-2021-44228. НЕ ИСПОЛЬЗУЙТЕ НИ ДЛЯ ЧЕГО, КРОМЕ ТЩАТЕЛЬНО КОНТРОЛИРУЕМОГО ТЕСТИРОВАНИЯ БЕЗОПАСНОСТИ. Этот репозиторий содержит пример приложения, которое намеренно использует зависимость с опасной уязвимостью удаленного выполнения код...
CVE-2025-56399
CVE-2025-56399 Exploit di Massa CVE-2025-56399 – Esecuzione di codice remoto in laravel-file-manager v3.3.1. Sfrutta una configurazione errata in Laravel File Manager per caricare e verificare una shell PHP tramite upload di file non autenticato. Installazione Scarica il repository root@kitploit:...
CVE-2025-15545
CVE-2025-15545 Informações Fornecedor: TP-Link Site do fornecedor: TP-Link Modelo: Archer RE605X Versão de hardware: RE605X v3.0 Versão do firmware: RE605XEUV31.1.5 Build 20240905 Endereço de download do firmware: TP-Link Uma cadeia de vulnerabilidades — incluindo o uso de chaves criptográficas...
CVE-2024-3400
Preuve de concept de CVE-2024-3400 uniquement à des fins éducatives. utilisez uniquement sur des serveurs pour lesquels vous avez l'autorisation de tester. Comment-Utiliser dépendances : root@kitploit: $ pip install rich scannez targets.txt : root@kitploit: $ python run.py -f targets.txt -t 10 -...
CVE-2020-14883
http://myq-x.remore:8090/index.php?m=WebServiceMgmt::invoke&p="d":"\\m\":"Wsf\\\\Win\\\\Firewall::delete\","\\p\":"----\\\"|ipconfig+/allC:\\\\Windows\\\\system32\\\\spool\\\\drivers\\\\1.txt||----","\\id\":"1","\\pwd\":"","s":"b75c29ef4a5a3d600d96732b3c5cbed1"...
vimana-framework
Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...
CVE-2025-59528
CVE-2025-59528: Flowise CustomMCP रिमोट कोड निष्पादन PoC CVE-2025-59528 को लक्षित करने वाला Flowise संस्करण...
Weggli_rules_SSTIC2023
فيما يلي قائمة منسقة لاستعلامات weggli يمكنك قراءتها واستخدامها واحدة تلو الأخرى، أو تشغيلها دفعة واحدة: الاستخدام: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ هناك ثلاث فئات: 1. الدوال الخطيرة: مثل strcpy, system، وغيرها.. 2. stack : يحاول اكتشا...
php_filter_chain_generator
مولّد سلسلة فلاتر PHP أداة سطر أوامر لتوليد سلسلة فلاتر PHP؛ احصل على RCE دون رفع ملف إذا كنت تتحكم بالكامل في المعامل المُمرَّر إلى require أو include في PHP! الاستخدام المساعدة root@kitploit: $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN...
EUVD-2026-66761
Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root...
Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230
CVE-2026-20230 Cisco Unified Communications Manager SSRF Écriture Arbitraire de Fichier vers RCE – Processus de Déduction et Réflexions Périmètre d'application : Utilisation uniquement sur des environnements de test locaux, des environnements de reproduction autorisés, pour la validation de...
Zerologon
Zerologon Code d'exploitation pour CVE-2020-1472 alias Zerologon...
CVE-2018-1270
CVE-2018-1270 CVE-2018-1270 Environnement d'expression RCE...
CVE-2025-55182-Scanner
CVE-2025-55182 - Scanner RCE pour React Server Components Une boîte à outils complète de tests de sécurité pour CVE-2025-55182, une vulnérabilité critique d'exécution de code à distance sans authentification préalable dans les React Server Components. 🎓 NOUVEAU : Guide pédagogique complet...