EVCer

EVCer | CVE-2023-0159 - Extensive VC Addons für den WPBakery Page Builder Automatisches Massentool zur Überprüfung der Schwachstelle in CVE-2023-0159 - Extensive VC Addons für WPBakery Page Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

MassZeroLogon

Tool zum Massentesten der ZeroLogon-Schwachstelle CVE-2020-1472 Schritte zur Vorgehensweise Für die Verwendung dieses Tools benötigen Sie eine Hosts-Datei mit der IP-Adresse und dem Hostnamen, getrennt durch ein Komma Beispiel einer Hosts-Datei root@kitploit: 1.1.1.1 , WIN-6641554161U 1.1.1.1 ,...

massCitrix

massCitrix Codice sviluppato per la verifica di massa della vulnerabilità CVE-2019-19781 degli host scoperti da Shodan. Pull requests sono benvenuti...

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Upload Arbitrario di File -purple 📌 Descrizione Il plugin CSV Mass Importer ≤ 1.2 per WordPress contiene una vulnerabilità di Upload Arbitrario di File Admin+. A causa di una convalida impropria dei file caricati, gli utenti con privilegi elevati...

CVE-2022-1388-Exploit

CVE-2022-1388-Exploit Script di test ed exploit per CVE-2022-1388 F5 Big-IP masscheck.py accetta un file di input e verifica se gli host sono vulnerabili senza sfruttarli. Rilevamento: Scansione di /mgmt/tm/util/bash come endpoint, probabilmente presente nei log del server web. Oppure, se hai un...

f5_scanner

f5scanner Scanner di massa per F5 e checker per CVE-2020-5902 Questo strumento è uno scanner di massa con 30 thread hardcoded, usare con cautela Come configurare root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt Come eseguire IP singolo...

CVE-2025-2304-POC

CVE-2025-2304 Escalation dei privilegi in Camaleon CMS Esempio root@kitploit: python3 exploit.py http://target.com attacker attacker Dopo lo sfruttamento riuscito, esci e accedi di nuovo per ottenere i privilegi di amministratore. Riferimenti https://nvd.nist.gov/vuln/detail/CVE-2025-2304...

MK4001MTD-USB-Bridge

جسر MK4001MTD USB برنامج ثابت لـ RP2040 Pico يوصل محرك Toshiba MK4001MTD 0.85" SDIO كجهاز تخزين كتلي USB. محرك MK4001MTD هو محرك صغير سعة 4 جيجابايت كان يُستخدم أصلاً في هاتف Nokia N91 الموسيقي وبعض الأجهزة الأخرى، مثل مشغلات MP3 أو محركات USB، في وقت كانت فيه ذاكرة الفلاش لا تزال باهظة الثمن. رب...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

Mass-Assigner

Mass Assigner Mass Assigner ist ein leistungsstarkes Tool, das entwickelt wurde, um Mass Assignment-Schwachstellen in Webanwendungen zu identifizieren und auszunutzen. Dies wird erreicht, indem zunächst Daten von einer angegebenen Anfrage abgerufen werden, z. B. durch Abrufen von...

exploit-joomla

exploit-joomla Un semplice exploit che sfrutta CVE-2015-7297, CVE-2015-7857 and CVE-2015-7858 per elencare gli utenti con la psw del db Exploit Title : Joomla 3.2 to 3.4.4 Remote SQL Injection Mass Exploit Date : 12-09-2020 Requirements : Python 3.4.x , Requests module python -m pip install...

PT-2026-81271

The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and...

CVE-2025-55182-React2shell

CVE-2025-55182 - React2shell Ein Python-2.7-Exploit für CVE-2025-55182 – eine kritische Prototype Pollution / RCE-Sicherheitslücke in Next.js-Anwendungen. Dieses Tool ermöglicht sowohl eine interaktive Shell für einzelne Ziele als auch Massen-Scans mehrerer Hosts mit Multithreading, farbiger...

CVE-2026-77923

Dolibarr versions 21.0.0 through 24.0.0 (exclusive) contain an authorization bypass in the clonetasks mass action handler (htdocs/core/actions_massactions.inc.php). An inverted boolean condition (!in_array()) in the private-project membership check allows any authenticated user with project creat...

CVE-2026-77923 Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clonetasks Mass Action

Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in the private-project membership check within the clonetasks mass action handler in htdocs/core/actionsmassactions.inc.php. Authenticated users with project creation permission bu...

EUVD-2026-65087

Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in the private-project membership check within the clonetasks mass action handler in htdocs/core/actionsmassactions.inc.php. Authenticated users with project creation permission bu...

CVE-2023-34960

CVE-2023-34960 Iniezione di comandi di massa non autenticata Chamilo Schermata Requisiti Python3.7+ Sistemi operativi supportati Linuxer Wingays Per iniziare root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-34960 $ cd CVE-2023-34960 $ pip/pip3 install -r requirements.txt $...

CVE-2025-2304

Camaleon CMS 2.9.0 – Escalação de Privilégio Autenticada Alteração de Função + Vazamento Opcional de Config S3 Alvo: Camaleon CMS v2.9.0 Tipo: Escalação de privilégio autenticada via mass-assignment em updatedajax campo role Extras: Extração opcional da configuração S3 da página de configurações ...

Apache-Struts-Shodan-Exploit

APACHE STRUTS SHODAN EXPLOIT POC Autore: @037 Il codice originale può essere trovato qui. Questo strumento sfrutta CVE-2018-11776 e Shodan per eseguire lo sfruttamento massivo di server Apache Struts verificati e vulnerabili. Il parametro di ricerca Shodan è stato omesso per evitare che eventuali...

CVE-2025-2304

Camaleon CMS v2.9.1 - Mass Assignment porta a Privilege Escalation - Strumento di Exploit - PoC Descrizione Questo progetto è uno strumento proof of concept di sfruttamento basato su Python che dimostra e analizza una vulnerabilità di escalation dei privilegi che interessa le versioni v2.9.1 di...