Exploit-CVE-2025-24799

Exploit-CVE-2025-24799 CVE-2025-24799 Exploit: GLPI - Inyección SQL no autenticada Instalación root@kitploit: git clone https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799 cd Exploit-CVE-2025-24799 pip3 install -r requirements.txt python3 exploit.py -h Únete a Rootkit Researchers...

CVE-2022-31061

CVE-2022-31061 PoC para GLPI CVE-2022-31061 Una Prueba de Concepto para GLPI = 9.3.0 y 10.0.2 - Inyección SQL no autenticada en la página de inicio de sesión Aviso legal : El uso de este script para atacar a un objetivo sin consentimiento mutuo es ilegal. Es responsabilidad del usuario final...

CVE-2022-35914

Script en Ruby para el CVE-2022-35914 - RCE en GLPI CVE-2022-35914 Simplemente añade el objetivo al script. Uso: root@kitploit: ruby.exe exploit.rb = whoami Puedes cerrar con: root@kitploit: = exit...

GLPwn

GLPwn Una herramienta de hackeo para GLPI, que utiliza el listado de directorios de Apache y/o CVE-2020-15175 para volcar archivos y sesiones válidas. ¿Quién es vulnerable? Cualquier instancia de GLPI que tenga el listado de directorios de Apache ya habilitado en la carpeta /files Todas las...

GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.

Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. id: CVE-2021-43778 info: name: GLPI plugin Barcode 2.6.1 - Path Traversal Vulnerability. author:...

GLPI 10.0.10-10.0.14 - SQL Injection

GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. id: CVE-2024-29889 info: name: GLPI 10.0.10-10.0.14 - SQL Injection autho...

GLPI <9.4.6 - Open Redirect

GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp. id: CVE-2020-11034 info: name: GLPI 9.4.6 - Open Redirect author: pikpikcu severity: medium description: GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp. impact: | An attacker can exploit this...

Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection

Teclib GLPI = 9.3.3 exposes a script /scripts/unlocktasks.php that incorrectly sanitizes user controlled data before using it in SQL queries. Thus, an attacker could abuse the affected feature to alter the semantic original SQL query and retrieve database records. id: CVE-2019-10232 info: name:...

GLPI 9.2/<9.5.6 - Information Disclosure

GLPI 9.2 and prior to 9.5.6 is susceptible to information disclosure via the telemetry endpoint, which discloses GLPI and server information. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-39211 info: name: GLPI 9.2/9.5.6 -...

CVE-2020-5248

Configuración del entorno POC y prueba de CVE-2020-5248. Método de prueba Configuración del entorno root@kitploit: vim docker/nginx/default.conf servername docker host ip ; -change mysqlserver: mysql id: root pw: root Ejecución root@kitploit: cd docker/app/ tar -xvf /docker/app/glpi-9.4.5.tgz chm...

CVE-2024-43416-PoC

CVE-2024-43416-PoC Blog Post with Poc for CVE-2024-43416: https://0xmupa.github.io/glpi-user-enumeration/...

CVE-2025-24801

CVE-2025-24801 PoC para RCE en GLPI Este repositorio contiene un script de prueba de concepto poc.py que explota CVE-2025-24801, una vulnerabilidad LFI a RCE en GLPI 10.0.17. Automatiza: Iniciar sesión en GLPI Habilitar la carga de archivos .php actualizando la configuración del tipo de documento...

CVE-2024-37147-PoC

CVE-2024-37147-PoC Entrada de blog con PoC para CVE-2024-37147: https://0xmupa.github.io/glpi-file-upload/...

CVE-2022-35914

CVE-2022-35914 PoC Referencias https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Créditos a Sébastien Copin por el PoC que adapté aquí Consulta mi análisis completo aquí: https://link.medium.com/tBwDlpQl3Ib Uso root@kitploit...

CVE-2024-27914

CVE-2024-27914: XSS reflejado en el modo depuración de GLPI Un usuario no autenticado puede proporcionar un enlace malicioso a un administrador de GLPI para explotar una vulnerabilidad de XSS reflejado. El XSS solo se activará si el administrador navega a través de la barra de depuración. Paquete...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI authtype 조작을 통한 권한 상승 PoC 📌 개요 이 저장소는 CVE-2026-53625 에 대한 윤리적 개념 증명PoC을 제공합니다. 이 취약점은 GLPI 0.70부터 11.0.7까지의 모든 버전에 영향을 미치는 높음High 심각도 권한 상승 취약점입니다. 낮은 권한의 사용자Technician는 REST API를 통해 authtype 필드를 조작하여 Super-Admin을 포함한 모든 계정을 완전히 제어할 수 있습니다. 이 공격은 세 가지 약점을 연쇄적으로 이용하여 완전한 계정 탈...

CVE-2022-35914-poc

CVE-2022-35914 PoC Referencias https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr Uso root@kitploit: pip install -r requirements.txt root@kitploit: ./CVE-2022-35914.py -h usage: CVE-2022-35914.py -h -u URL -c CMD -f HOOK --check --user-agent USERAGENT CVE-2022-35914 - GL...

exploit-cve-2023-36808

CVE-2023-36808 - GLPI Unauthenticated SQL Injection Vulnerability GLPI versions field is injected directly into a SQL query without sanitisation: root@kitploit: SELECT id FROM glpiagents WHERE deviceid = '' No authentication is required. The vulnerability allows full database read access via blin...

CVE-2022-35914-RCE

CVE-2022-35914 by cyb3rk0ala PoC for CVE-2022-35914 , a command-injection vulnerability involving the htmLawed test component in vulnerable GLPI installations. The tool provides command execution through the vulnerable endpoint and includes optional callback functionality for authorized lab...

poc-CVE-2026-23489

POC CVE-2026-23489 Proof of concept for CVE-2026-23489 GLPI "Fields" plugin --cookie-value COOKIEVALUE GLPI session cookie value --php PHP Raw PHP to execute on the server end statements with ';', Dropdowns...