put2win

put2win PUT HTTP 메서드 악용을 자동화하여 셸을 획득하는 스크립트입니다. 설치 root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh 사용법 root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: -t TARGET Target URL/IP e.g. 192.168.1.10 -p PORT Target PORT...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882 설명 Oracle Fusion Middleware의 Oracle WebLogic Server 제품구성 요소: Console의 취약점입니다. 영향을 받는 지원 버전은 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 및 14.1.1.0.0입니다. 쉽게 악용 가능한 이 취약점은 HTTP를 통한 네트워크 접근이 가능한 인증되지 않은 공격자가 Oracle WebLogic Server를 손상시킬 수 있게 합니다. 이 취약점의 성공적인 공격은 Orac...

bash-CVE-2017-17562

bash-CVE-2017-17562 CVE-2017-17562에 대한 Bash 기반 PoC 구현체입니다. HTTP 요청 생성을 위해 curl이 필요합니다. 이 구현은 Metasploit 및 @fssecur3의 구현을 기반으로 합니다. Arguments 다음 인수들은 정찰 및 페이로드 전송을 위해 필수로 설정되어야 합니다: root@kitploit: $1: IP/Host of remote vulnerable machine being attacked $2: Port of remote machine webserver $4: Path...

CVE-2026-83306

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Resource Catalog Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83194

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

CVE-2026-83176

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83174

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Application Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM...

RCE-Exploit-Framework

RCE-Exploit-Framework このフレームワークは、ペネトレーションテスターや開発者がリモートコード実行（RCE）エクスプロイトの仕組みを理解するための支援を目的としています。 特徴 ペイロード生成部 : Python、Bash、PHPに基づくカスタムペイロードの作成をサポートします。 エクスプロイト実行部 : HTTP POSTまたはGETを介してターゲットにペイロードを配信します。 リバースシェルリスナー : リバースシェル接続を受信するためのモジュールです。 ログ出力 : 分析のためのエクスプロイト活動のログを保存します。 使用方法 1...

CVE-2026-87208

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes on accessible ...

EUVD-2026-79698

Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks...

CVE-2026-83199

Oracle Siebel CRM (product: Siebel CRM Deployment , component: Server Infrastructure ) versions 17.0–26.7 are affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to achieve takeover of the product. The CVSS 3.1 base score is 8.8 (HIGH) with high impacts to ...

EUVD-2026-79453

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-62626

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Repor...

CVE-2026-61302

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Pod Admin. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-61986

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...

EUVD-2026-61848

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61702

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite component: Customer Tab. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customers Online...

EUVD-2026-61501

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion...

EUVD-2026-61412

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter...

PT-2026-77830

Name of the Vulnerable Software and Affected Versions Oracle iRecruitment versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iRecruitment product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...