wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 20th Aug 2020 Wordpress Plugin 0day elFinder vulnerability is a well-know vulnerability, my script only changes path to "/wp-content/plugins/wp-file-manager/". Stop requesting fixes in script or something else for me. RTFM... References:...

CVE-2018-6574

CVE-2018-6574 CVE-2018-6574 go get RCE...

flask-session-cookie-manager

Decodificador/Codificador de Cookies de Sesión de Flask Autor original : Wilson Sumanang Autor de correcciones y mejoras : Alexandre ZANNI Importado desde saruberoz.github.io Dependencias Python 2 o Python 3 itsdangerous Flask Instalación Paquete BlackArch Linux root@kitploit: pacman -S...

KTM_POCS

KTMPOCS This repo contains reports for CVE 2024-43570 and CVE 2024-43535, two vulnerabilities I found in the Windows Kernel Transaction Manager driver tm.sys. This repo also contains exploit code I used for the demos in the OffensiveCon25 Presentation: Hunting for Overlooked Cookies in Windows 11...

CVE-2021-43471

CVE-2021-43471 Denial of service vulnerability caused by unauthorized access to Canon printers Affect product: LBP223 Time: 2021.11.3 The System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a...

CVE-2021-45010

CVE-2021-45010 🐍 Contrived Python PoC Exploit for CVE-2021-45010. Tiny File Manager 2.4.7 Usage root@kitploit: usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

CVE-2020-10239

Made by HK CVE-2020-10239: Incorrect Access Control in comfields SQL field - RCE PoC Affected version: Joomla core from 3.7.0 to 3.9.15 User requirement: Manager accountLowest-level in back-end Gain access: Change you from Manager to Superadmin, then trigger RCE. Remote Code Execution RCE in Joom...

CVE-2020-10199

Nexus Repository Manager 3 Vuln Affected versions: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Remote Code Execution Echo PoC No Echo PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Normal User Privileges...

CVE-2024-23998

Another Redis Desktop Manager PoC A Proof-Of-Concept for CVE-2024-23998 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: =...

Python-exploit-CVE-2020-25213

Description The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload or...

wp-file-manager-CVE-2020-25213

WP-file-manager expoit CVE-2020-25213 WP-file-manager wordpress plugin 6.9 vulnerable to unauthenticated arbitary file upload resulting in full compromise of the system. For More more details refer to my writeup published here Disclaimer I haven't discovered this vulnerability & neither taking an...

CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

🚨 Wazuh Remote Code Execution RCE - PoC 📌 Vulnerability Summary A critical RCE vulnerability has been identified in the Wazuh server due to unsafe deserialization in the wazuh-manager package. This bug affects Wazuh versions ≥ 4.4.0 and has been patched in version 4.9.1. 🔍 Details The flaw lies i...

CVE-2024-7627-PoC

CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...

CVE-2020-14321

Python script to exploit CVE-2020-14321 - Moodle 3.9 Course enrolments allowed privilege escalation from teacher role into manager role to RCE. Teachers of a course were able to assign themselves the manager role within that course. Payload extracted from:...

CVE-2023-36874

CVE-2023-36874 Proof of Concept PoC An educational and defensive research implementation of the CVE-2023-36874 vulnerability, demonstrating a Local Privilege Escalation LPE flaw within the Windows Error Reporting WER component. ⚠️ Disclaimer This repository and the provided source code are intende...

CVE-2012-2982-Webmin-Exploit

Webmin 1.590 Remote Command Execution Exploit CVE-2012-2982 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2012-2982 , a remote authenticated command execution vulnerability affecting Webmin versions 1.590 and earlier. The vulnerability resides in the /file/show.cgi...

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit Introduction This exploit was developed during pentesting activity against oracle OAM 11.1.2.3.0. It was developed based on the technical description by sec-consult root@kitploit:...