CVE-2021-24917

Exploit per CVE-2021-24917...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-62958

Una vulnerabilità in Libriscv permette all'attaccante di far crashare la sandbox utilizzando una lettura fuori dai limiti. Per creare Bad elf: root@kitploit: python3 poc.py samplefile poisonedfile Risultati: root@kitploit: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at...

CVE-2020-0796-DoS

CVE-2020-0796 DoS PoC SMBGhost Una semplice dimostrazione che sfrutta CVE-2020-0796. Questo script provocherà un BSoD sulle macchine vulnerabili. Puro Python 3 senza dipendenze aggiuntive richieste. Utilizzo python CVE-2020-0796-DoS.py Crediti I dati dei pacchetti hard-coded derivano da questo...

WAGO-CVE-2023-1698

WAGO-CVE-2023-1698 WAGO-System-Ferncodeausführungs-Schwachstelle CVE-2023-1698 Hinweis Ich habe ein Tool für lokale Tests und POC-Entwicklung entwickelt, das nur als technische Lernreferenz dient. Bitte verwenden Sie es nicht für illegale Zwecke. Direkte oder indirekte Konsequenzen und Verluste,...

CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit

CVE-2019-5096 Use After Free Dos Exploit root@kitploit: python TriggerDOS.py ip Analisi della vulnerabilità https://github.com/embedthis/goahead.git Collegamento GitHub di GoAhead git diff della patch Analisi del codice critico Nel codice, individuare upload.c:370, si può vedere che in...

netwave-dosvulnerability

Il server Netwave IP Camera è vulnerabile a una Denial of Service non autenticata tramite un'unica enorme richiesta POST su qualsiasi firmware. CVE| Descrizione ---|--- CVE-2018-6479| Vulnerabilità di negazione del servizio Denial of Service remota non autenticata CVSS| Punteggio| Dettagli...

CVE-2025-7775

CVE-2025-7775 Vulnerabilità di overflow della memoria che porta a esecuzione di codice remoto e/o denial of service in NetScaler ADC e NetScaler Gateway quando NetScaler è configurato come Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy o AAA virtual server OPPURE NetScaler ADC e NetScaler...

CVE-2022-29885

CVE-2022-29885 von 1vere$k Apache Tomcat DoS CVE-2022-29885 Exploit. Denial of Service in EncryptInterceptor Tomcat Cluster. Die Zielmaschine muss den Cluster Nio Receiver starten. Das Senden eines speziellen TCP-Pakets verursacht einen Denial of Service auf dem Ziel. Ob EncryptInterceptor...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys Version 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

Minimus-Junior-Backend-Exercise

Esercizio Backend Junior — dasel v3.3.1 Pacchetto dasel v3.3.1 con Melange, crea un'immagine container con apko e correggi CVE-2026-33320. Prerequisiti: Docker. Tutti i passaggi di build vengono eseguiti all'interno di container — non è necessaria alcuna installazione locale di melange/apko. Eseg...

strutt-cve-2014-0114

CVE-2014-0114 - Schwachstelle in Struts 1 Parameter in einer POST- oder GET-Request werden als Eigenschaften Properties behandelt, die ausgehend vom Formular gesetzt werden sollen. Parameter können ein Pfad zu einem verschachtelten Objekt sein. Apache Struts 1.x kann manipuliert werden, um getCla...

CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533-Exploit-for-Apache-ActiveMQ PoC exploit per CVE-2025-27533 , una vulnerabilità Denial of Service DoS in Apache ActiveMQ. Questo strumento invia pacchetti OpenWire malevoli per esaurire la memoria heap della JVM del server di destinazione, potenzialmente causando il crash del serviz...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

Eaton Intelligent Power Manager 1.6 - Directory Traversal

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service. id: CVE-2023-5559 info: name: 10Web Booster 2.24.18 - Unauthenticated Arbitra...

Mitel MiCollab - Information Disclosure & Denial of Service

Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....

Cisco Unified IP Conference Station 7937G - Denial-of-Service

Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...