CVE-2022-35649

CVE-2022-35649 Generador de Payload usando Python 2 y Análisis Detallado para CVE-2022-35649 El PoC en Python genera un payload al explotar un 0-day de GhostScript 9.50. Este exploit de 0-day afecta a ImageMagick con la configuración predeterminada del repositorio de Ubuntu probado con la...

CVE-2022-23935

CVE-2022-23935 🐍 Exploit en Python para CVE-2022-23935 Generador de payloads de shell inversa por etapas para CVE-2022-23935 Ejemplo root@kitploit: cve-2022-23935 10.10.16.3 44444 Uso root@kitploit: usage: cve-2022-23935 -h -l SERVERPORT -s SHELL ip port positional arguments: ip IP Address/Host f...

lazylist-cve-poc

CVE-2022-36944 payload generator This mini-project is created to demonstrate proof of concept of CVE-2022-36944 vulnerability. It is similar to ysoserial, but generates payload only for this CVE with LazyList class. Quick FAQ What artifacts bring the vulnerability? org.scala-lang:scala-library wi...

watchTowr-vs-FortiSIEM-CVE-2025-25256

watchTowr-vs-FortiSIEM-CVE-2025-25256 Generador de artefactos de detección para FortiSIEM CVE-2025-25256 https://github.com/user-attachments/assets/1aa1040a-af34-460d-8844-1e440efa9ba1 Consulte nuestra publicación en el blog para obtener detalles técnicos Detección en acción root@kitploit: python...

webshell

webshell | English | Türkiye Этот проект представляет собой коллекцию webshell. Дарите розы — и на ваших руках останется аромат. Если вы скачали этот проект, пожалуйста, тоже присылайте свои shell. Этот проект охватывает различные часто используемые скрипты. Например: asp,aspx,php,jsp,pl,py При...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, comúnmente conocido como CurveBall, es una vulnerabilidad en la que la firma de certificados que utilizan criptografía de curva elíptica ECC no se verifica correctamente. ECC depende de diferentes parámetros. Estos parámetros están estandarizados para...

CVE-2025-53770_Raw-HTTP-Request-Generator

Este repositorio no tiene un README...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder = 1.7.5 - Unauthenticated Arbitrary File Download Usage python CVE-2024-9935.py http://example.com...

CVE-2024-57521-RuoYi-SQLi

🛡️ CVE-2024-57521 RuoYi-Vue 认证后 SQL 注入漏洞审计笔记 0. 项目声明 本仓库仅供安全研究与教育目的使用。请勿利用本文档中的技术进行未授权的攻击行为。所有测试均在本地静态代码审计环境下完成。 1. 漏洞概述 CVE编号 ：CVE-2024-57521 影响组件 ：RuoYi-Vue 权限管理系统（ruoyi-generator 模块） 影响版本 ：= v4.7.9 漏洞类型 ：认证后 SQL 注入（布尔盲注 / CWE-89） CVSS评分 ：10.0 Critical 审计方式 ：纯静态代码审计（源码分析） 2. 数据流审计分析 Source →...

node-pdf-generator-ssrf

CVE-2020-7740 Esto afecta a todas las versiones del paquete node-pdf-generator. Debido a la falta de validación y sanitización de la entrada del usuario realizada al contenido proporcionado a node-pdf-generator, es posible que un atacante cree una URL que será pasada a un servidor externo...

CVE-2025-15698

The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Talon

Talon Talon is a 3rd party agent for Havoc written in C. It's very minimalistic and it's meant to show how to work with the Havoc service api. Talon.py is the script that handles callbacks, register reqeuest and tasks by interacting with the Havoc service api...

AutoHoneyPoC

AutoHoneyPoC AutoPoC Generator HoneyPoC ultimate edition. If this is the first time you've heard of or seen the project, you'll want to read the blog post. https://blog.zsec.uk/honeypoc-ultimate/ While I'm releasing AutoPoC, the framework on its own is harmless as it requires some pre-requisites ...

EUVD-2025-210971

The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-15698

The Business Name Generator WordPress plugin (versions through 1.3 ) fails to sanitise and escape its settings, specifically the Button Color setting, enabling Stored XSS by high-privilege users (admin and above). The vulnerability is notable because it persists even when the unfiltered_html capa...

CVE-2025-15698 Business Name Generator <= 1.3 - Admin+ Stored XSS via Button Color Setting

The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-5288

🚨 REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Autorización faltante que permite escalada de privilegios no autenticada 📋 Descripción El plugin REST API | Custom API Generator For Cross Platform And Import Export In WP para WordPress es vulnerable a l...

Payload_CVE_2013_2186

PayloadCVE20132186 Code generate payload for CVE-2013-2186...

Mystikal

Mystikal macOS Initial Access Payload Generator Intended to be used with https://github.com/its-a-feature/Mythic Related Blog Post: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Usage: 1. Install Xcode on build machine Required for Installer Package w/ Installer Plugin 2. Install...

xss2shell

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behavior-first mass scanner and evidence-grade PoC generator for the WordPress pre-auth XSS-to-RCE chain affecting 500M+ websites. Detection only. No weaponization. Built for bug bounty programs and blue teams. Official Checker:...