480182 matches found
CVE-2015-8562
CVE-2015-8562 - Reverse shell python Exploit: Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header: root@kitploit: Vuln Date: 12/17/2015 Exploit Author: anarc0der Version: Joomla 1.5 to 3.4.5 CVE : CVE-2015-8562 How to: root@kitploit: Open one terminal and listen with nc: $ nc -lnvp 444...
CVE-2020-5752
CVE-2020-5752: Druva inSync Escalada de Privilegios Local Un exploit en C para el Cliente Windows de Druva inSync v6.6.3 y anteriores. La aplicación expone un servicio RPC en el puerto 6064 que es vulnerable a inyección de comandos mediante path traversal. Esto permite a un usuario local ejecutar...
SecOPD
SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation Yibo Peng · Long Lian · David Wagner† · Sizhe Chen† † Joint supervision. Paper Project page Model This release implements the paper's final full-response KL formulation, also described as the no-parsing variant. The student...
CVE-2021-3317
Information Exploit Title: Klog Server 2.4.1 - Command Injection Authenticated Date: 26.01.2021 Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Description: https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection CVE:...
CVE-2024-8353-PoC
Proof-Of-Concept Code for CVE-2024-8353 This repository contains a script for exploiting the CVE-2024-8353 vulnerability in the GiveWP plugin for WordPress. This vulnerability allows unauthenticated PHP Object Injection, potentially leading to remote code execution. Overview The provided scripts...
CVE-2024-3217-POC
CVE-2024-3217-POC Mitre Description The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attributevalue' and 'attributeid' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...
RootQuest-CTF-Box-Multi-Stage-Exploitation-VM
RootQuest CTF Box — Multi-Stage Exploitation VM 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II Overview RootQuest is a purpose-built CTF virtual machine that contains a 10-stage , sequential attack path spanning 5 security domains. Each challenge...
CVE-2009-3036
CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 Symantec IM Manager Console HTML Injection Vulnerability info discussion exploit solution references noexploitlink...
nosqli-flintcms
nosqli-flintcms Blind noSQL injection case study lab based on CVE-2018-3783 privilege escalation on flintcms 1.1.9. The vulnerability was originally discovered by Benoit Côté-Jodoin. You can read original report on HackerOne. Prerequisites root@kitploit: docker-compose Limitation : We removed...
milvus-auth-audit
milvus-auth-audit Milvus authentication security audit script. Detects three authentication flaws: Flaw| CVE| Affected versions| Detection method ---|---|---|--- sourceid backdoor auth bypass| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100 Arguments: --host: Milvus proxy...
CVE-2023-34960
CVE-2023-34960 Mass unauthenticated command injection Chamilo Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-34960 $ cd CVE-2023-34960 $ pip/pip3 install -r requirements.txt $ python/python3 exploit....
CVE-2023-5412
CVE-2023-5412 Image horizontal reel scroll slideshow = 13.2 - Authenticated Subscriber+ SQL Injection via Shortcode Description: The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to...
CVE-2018-10562
CVE-2018-10562 CVE-2018-10562 漏洞利用 关于 GPON 家庭路由器上的 RCE CVE-2018-10561:认证绕过 CVE-2018-10562:命令注入 所需依赖 requests urllib2 ssl re 截图...
ivanti-CVE-2024-21887
ivanti-CVE-2024-21887 POC Checker for ivanti CVE-2024-21887 Command injcetion...
CVE-2026-59230
CVE-2026-59230 — camel-mail MimeMultipart header injection headersInline Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...
CVE-2026-60004
CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection → post-index-change → Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...
CVE-2026-65321-pyathena
CVE-2026-65321: SQL Injection in PyAthena via Backslash Quote-Escaping for Non-SELECT Statements Severity: Critical, CVSS v4.0 9.3 / CVSS v3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1:...
CVE-2026-63720-datamodel-code-generator
CVE-2026-63720: Code Injection in datamodel-code-generator via Unvalidated customBasePath Severity: High, CVSS 3.1 7.5 / CVSS 4.0 7.5 assigned by VulnCheck, the CNA Environmental ceiling network-service deployment: up to 9.8 Vector v4.0:...
CVE-2025-4427-CVE-2025-4428
CVE-2025-4428 & CVE-2025-4427 CVE-2025-4428 is a post-auth remote code execution vulnerability in EPMM's DeviceFeatureUsageReportQueryRequestValidator. It arises from the unsafe handling of user-supplied input within error messages processed via Spring’s AbstractMessageSource, which allows...