CVE-2020-14882-14883

CVE-2020-14882&14883 Weblogic es un servidor de aplicaciones J2EE lanzado por Oracle. CVE-2020-14882 es una vulnerabilidad de acceso no autorizado a Console, con un nivel de gravedad catalogado como crítico, y una puntuación de 9.8. Por su parte, CVE-2020-14883 consiste en la ejecución de código ...

CVE-2024-32002

CVE-2024-32002 1. Edita el archivo exploit.sh reemplaza los repositorios 2. ejecuta bash exploit.sh exploit.sh Inspirado por - https://github.com/safebuffer/CVE-2024-32002 Hecho para CTF Versiones vulnerables v2.45.0 v2.44.0 =v2.43.3 =v2.42.1 v2.41.0 =v2.40.1 =v2.39.3 Fuente...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Elevación de Privilegios en Microsoft SharePoint Server Explotación de CVE-2023-29357 CVE-2023-29357 es una vulnerabilidad crítica de escalada de privilegios que, combinada con otras vulnerabilidades, podría conducir a la ejecución remota de código. La puntuación CVSS para esta...

CVE-2024-33210

CVE-2024-33210 A cross-site scripting XSS vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: flatpress CMS Affected Product Code...

ATLASSIAN-Confluence_rce

ATLASSIAN-Confluencerce CVE-2022-26134 Instalación root@kitploit: git clone https://github.com/xanszZZ/ATLASSIAN-Confluencerce cd ATLASSIAN-Confluencerce Uso Debido a que esta herramienta es un PoC escrito siguiendo las especificaciones de desarrollo del framework pocsuite3 Antes de usarla,...

CVE-2020-8158

CVE-2020-8158: TypeORM Prototype Pollution Vulnerability Overview This is a proof-of-concept demonstrating CVE-2020-8158, a critical prototype pollution vulnerability in TypeORM versions 0.2.25. Vulnerability Details CVE ID : CVE-2020-8158 CVSS Score : 9.8 CRITICAL Affected Package : TypeORM 0.2....

CVE-2018-11776-FIS

CVE-2018-11776 is a security vulnerability in Apache Struts, a popular framework for developing web applications. This vulnerability allows attackers to carry out remote attacks by injecting malicious code into data fields of HTTP requests. This vulnerability has been widely exploited in...

CVE-2023-38646

CVE-2023-38646 El script original proviene de securezeron Durante mis pruebas, descubrí que la shell inversa generada por este PoC fallaba en la explotación tras la codificación base6 debido al carácter '=' al final. Lo modifiqué ligeramente para resolver este problema. root@kitploit: 原始的生成revers...

CVE-2024-25153

Exploit for CVE-2024-25153 Table of Contents Click to expand 1. Introduction 2. Installation 3. Usage 4. Contributing 5. License Introduction Welcome to the Exploit for CVE-2024-25153! This project is a solution to exploit the CVE-2024-25153 vulnerability and execute code remotely in Fortra...

CVE-2023-1521

PoC root@kitploit: gcc -shared -o libpoc.so poc.c -fPIC export LDPRELOAD=fullpathtolibpoc.so sccache gcc foo.c -o foo...

CVE-2023-36844

CVE-2023-36844 The "Remote Code Execution in Juniper JunOS within SRX and EX Series products" vulnerability is a security issue that allows an attacker to execute arbitrary code on a targeted Juniper device running JunOS software. This vulnerability could potentially lead to a compromise of the...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on...

CVE-2024-57175

CVE-2024-57175: Stored Cross-Site Scripting XSS in PHPGURUKUL Online Birth Certificate System v1.0 Description A stored Cross-Site Scripting XSS vulnerability was identified in PHPGURUKUL Online Birth Certificate System v1.0 in the /user/certificate-form.php page. This vulnerability allows...

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468

Análisis detallado y estrategias de mitigación para CVE-2024-38124 y CVE-2024-43468 Análisis detallado y estrategias de mitigación mediante script para CVE-2024-38124 y CVE-2024-43468 CVE-2024-38124: Netlogon de Windows Contexto técnico de explotación: en un escenario del mundo real, un atacante...

Exploit_CVE-2019-17558-RCE

ExploitCVE-2019-17558-RCE Inyección en Apache Solr 1.4 para obtener una shell para codificar url, postrequest, getrequest...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Instalación root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Uso root@kitploit: python3 CVE-2025-63406.py -u -n -p -c...

Ashwesker-CVE-2025-52691

🚨 CVE-2025-52691 — Critical SmarterMail Vulnerability Status: 🔥 Critical — Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29–30, 2025 🧩 Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...

CVE-2025-55182-POC

CVE-2025-55182 / CVE-2025-66478 Entorno de reproducción de vulnerabilidades Este es un MVP mínimo para reproducir las vulnerabilidades React2Shell CVE-2025-55182 y Next.js RSC RCE CVE-2025-66478. ⚠️ Advertencia Este proyecto es solo para fines de investigación y educación en seguridad. No lo...

HTTP-Request-for-PHP-object-injection-attack-on-CVE-2023-41892

This type of attack attempts to exploit the PHP application's deserialization process to execute arbitrary code or carry out unintended actions on the server. Mitigation Strategies To defend against PHP object injection and similar attacks, consider the following strategies: Disable PHP Object...

CVE-2024-50972

CVE-2024-50972 Description A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...