cve-2016-7434

CVE-2016-7434 Ceci fait partie de Cved : un outil pour gérer les conteneurs Docker vulnérables. Cved : https://github.com/git-rep-src/cved Source de l'image : https://github.com/cved-sources/cve-2016-7434 Auteur de l'image : https://github.com/opsxcq/exploit-CVE-2016-7434...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 injection de commande. Le package pdfkit est vulnérable à l'injection de commande lorsque l'URL n'est pas correctement assainie. Remarque : Ce problème a été corrigé dans la version 0.8.7.2, mais le correctif s'est avéré inefficace. La version de...

react2shell-scanner

React2Shell 스캐너 – PoC 포함 CVE-2025-55182 – React Server Components RCE PoC Hidden Investigations React2Shell 실습을 위한 교육용 익스플로잇 클라이언트 이 저장소는 React Server Components / Next.js 애플리케이션의 잘못된 설정을 대상으로 하는 React2Shell 취약점CVE-2025-55182에 대한 단일 호스트 개념 증명PoC 익스플로잇 도구를 포함합니다. 이 도구는 공식 Hidden Investigations...

POC_CVE-2023-21839

CVE-2023-21839 Selon les besoins spécifiques, j'ai traduit la version GO de @4ra1n en Python, encore merci ! Avertissement Ce programme doit être utilisé uniquement à des fins de tests de sécurité et de recherche autorisées. L'utilisateur doit se conformer à la loi sur la cybersécurité. Toute...

CVE-2010-4476-check

Попробуй скомпилировать это! :D...

Android-rce-analizi

Laboratoire de Recherche CVE et PoC — Analyse de Sécurité Android 👨‍🏫 Informations sur l'Encadrant Nom Complet| Keyvan Arasteh ---|--- GitHub| @keyvanarasteh E-mail| [email protected] LinkedIn| keyvanarasteh Site Web| qline.tech 👤 Informations sur l'Étudiant Nom Complet| Baha Furkan Yıldız...

CVE-2024-22263_Scanner

CVE-2024-22263Scanner Только для этического использования. Любые вредоносные или злонамеренные действия запрещены. И это ваша собственная ответственность. CVE-2024-22263: Произвольная запись файлов в Spring Cloud Dataflow Использование root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Deterministic, multi-phase scanning with 317 modules across content discovery, browser/SPA spidering, and...

secveri-cve-2026-50011-negative

Ce depot n’a pas de fichier README...

CVE-2021-40449-Exploit

CVE-2021-40449-Exploit Fonctionne uniquement sur Windows 10 14393 et Windows 10 17763 Utilisez Palette pour le spray et RtlSetAllBits pour l'écriture...

CVE-2020-35391-POC

Bienvenue sur CVE-2020-35391-POC 👋 Contournement d'authentification Tenda N300 via en-tête de requête HTTP malformée - PoC Python Les appareils Tenda N300 F3 12.01.01.48 permettent aux attaquants distants d'obtenir des informations sensibles incluant possiblement une ligne httppasswd via une...

FollinaScanner

FollinaScanner Un outil écrit en Go qui scanne les fichiers et répertoires pour l'exploit Follina CVE-2022-30190 Note: "Suspicious files" signifie des fichiers qui contiennent une URL mais qui ne fonctionnent pas Compilation root@kitploit: git clone https://github.com/ErrorNoInternet/FollinaScann...

CVE-2019-0708

RDP Preuve de concept Ceci est le code source de la preuve de concept pour CVE-2019-0708...

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

Apache Solr DataImportHandler <8.2.0 - Remote Code Execution

Apache Solr is vulnerable to remote code execution vulnerabilities via the DataImportHandler, an optional but popular module to pull in data from databases and other sources. The module has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug...

WordPress Super Forms <= 6.3.313 - Arbitrary File Upload

Super Forms – Drag & Drop Form Builder WordPress plugin \u003C= 6.3.313 contains an arbitrary file upload vulnerability caused by missing file type validation and lack of capability checks in submitform nopriv AJAX handler, letting unauthenticated attackers upload executable files and achieve...

FormCraft3 <= 3.9.15 - Server-Side Request Forgery

Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions. id: CVE-2026-65442 info: name: FormCraft3 = 3.9.15 - Server-Side Request Forgery author: DhiyaneshDk severity: high description: | Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...

Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token Exfiltration

Parse Server 8.6.21 / 9.x 9.5.2 contains an information disclosure vulnerability caused by improper handling of the redirectClassNameForKey query parameter, letting authenticated or unauthenticated attackers exfiltrate session tokens, exploit requires ability to create or update an object with a...

Langflow <= 1.0.12 - Remote Code Execution

Langflow 0.6.19 contains a remote code execution caused by accepting untrusted Python scripts in the /api/v1/customcomponent endpoint, letting remote attackers execute arbitrary code, exploit requires access to the endpoint and untrusted script input. id: CVE-2024-37014 info: name: Langflow =...

Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure

Automad 2.0.0-alpha.1 to 2.0.0-beta.27 contains a broken access control vulnerability caused by publicly accessible /api/user-collection/create-first-user endpoint returning full serialized user data, letting unauthenticated attackers retrieve bcrypt password hashes of all administrator accounts,...