CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept pki-core में एक दोष पाया गया। XML दस्तावेज़ों को पार्स करते समय बाहरी संस्थाओं तक पहुँच XML बाहरी संस्था XXE हमलों का कारण बन सकती है। यह दोष एक दूरस्थ हमलावर को विशेष रूप से तैयार किए गए HTTP अनुरोध भेजकर मनमानी फ़ाइलों की सामग्री प्राप्त करने की अनुमति देता है।...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 Rilevamento della vulnerabilità root@kitploit: USAGE python MS15-034.py www.xxx.com:80 Programma di test Vulnerabilità di esecuzione codice remota in HTTP.sys CVE-2015-1635, MS15-034 La vulnerabilità di esecuzione codice remota esiste nello stack del protocoll...

CVE-2021-38647-POC-and-Demo-environment

Dettagli OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, in precedenza noto come NanoWBEM è un server di gestione open source del Common Interface Model CMI creato da Microsoft e The Open Group. OMI è un agente software presente nella maggior parte delle VM Linux di Azure, ma molti no...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Führen Sie den Exploit aus root@kitploit: python3 exploit.py...

CVE-2025-0108-Authentication-Bypass-checker

Dieses Tool testet, ob ein Ziel-PAN-OS-Gerät anfällig für die CVE-2025-0108 Authentication-Bypass-Schwachstelle ist. Es sendet eine präparierte HTTP-Anfrage an das Ziel und analysiert die Antwort, um festzustellen, ob das Gerät ausnutzbar ist. Verwendung Einzelne IP root@kitploit: python...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidade Crítica de Bypass de Autenticação 🧾 Resumo 🔥 Uma vulnerabilidade de severidade máxima 10.0 que permite acesso remoto não autenticado a sistemas Oracle middleware. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Exploração da Vulnerabilidade de Execução Remota de Código CVE-2024-7954 Projeto de Teste de Vulnerabilidade de Software Enviado por: Shivansh Kuntal Visão Geral Este projeto demonstra a exploração da CVE-2024-7954 , uma vulnerabilidade crítica de Execução Remota de Código RCE que afeta o SPIP CM...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner Ein entfernter Angreifer kann eine spezielle HTTP-Anfrage konstruieren, um die WebLogic Server Console ohne Authentifizierung zu übernehmen. Installation und Nutzung git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd...

RCE_CVE-2024-7954-

RCECVE-2024-7954- O plugin porteplume utilizado pelo SPIP antes das versões 4.30-alpha2, 4.2.13 e 4.1.16 é vulnerável a uma vulnerabilidade de execução arbitrária de código. Um atacante remoto e não autenticado pode executar PHP arbitrário como o usuário do SPIP ao enviar uma requisição HTTP...

CVE-2020-5902-Vuln-Checker

Controllo Vulnerabilità CVE-2020-5902 Mentre esaminavamo la vulnerabilità con altri ricercatori, ci siamo resi conto che la maggior parte dei metodi attuali per testare la vulnerabilità può essere classificata come una forma di compromissione del sistema. Volevamo sviluppare un modo per testare l...

EUVD-2026-51230

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request...

CVE-2026-20146

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by CVE-2026-20146. The issue stems from improper validation of user-supplied input, enabling a remote, authenticated attacker (with valid administrative credentials) to perform path traversal via a crafted HTTP request and read or dele...

PT-2026-60218

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 3.3 Cisco Identity Services Engine versions 3.3 through 3.3 before Patch 12 Cisco Identity Services Engine versions 3.4 through 3.4 before Patch 7 Cisco Identity Services Engine versions 3.5...

CVE-2026-41721

A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request when Spring Data Web Support is enabled with a Controller method using @ProjectedPayload. This can cause the application to allocate excessive memory, leading to a...

PT-2026-54702

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description Insufficient validation of user-supplied input allows an unauthenticated, remote attacker to read arbitrary files from a restricted container. This is achieved by sending a...

CVE-2025-36319 Vulnerabilities found in Watson Data Intelligence

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper allocation of resource throttling...

nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers

A flaw was found in NGINX. When NGINX is configured to proxy HTTP/2 traffic using the ngxhttpproxyv2module or ngxhttpgrpcmodule with specific settings, a remote, unauthenticated attacker can send specially crafted large headers. This can trigger a heap-based buffer overflow, leading to a restart ...

CVE-2026-36821

Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36796

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36792

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formWifiRadioSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...