CVE-2019-11043

CVE-2019-11043 Python exp per CVE-2019-11043 root@kitploit: You can use build environment from https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 Utilizzo: root@kitploit: python3 main.py -u http://iptopage/index.php Se hai successo, vedrai: root@kitploit: Base status code is 200...

CVE-2022-45701

EN Questo progetto fornisce uno script Python per sfruttare una vulnerabilità di esecuzione remota del codice RCE CVE-2022-45701 in alcuni router Arris. La vulnerabilità consente agli utenti autenticati di eseguire comandi arbitrari sul dispositivo manipolando le impostazioni SNMP tramite...

CVE-2021-44228

CVE-2021-44228 कमजोर Minecraft गेम सत्रों में CVE-2021-44228 को पैच करने के लिए Log4J CVE-2021-44228 का दुरुपयोग करें ताकि सत्र में शोषण को रोका जा सके : JNDI/LDAP हेरफेर से रिमोट कोड निष्पादन की स्वप्नभूमि तक की यात्रा...

CVE-2025-31161

CrushFTP CVE-2025-31161 Strumento di Exploit 🔓 Strumento avanzato di rilevamento e sfruttamento per la vulnerabilità CVE-2025-31161 nelle versioni vulnerabili di CrushFTP. CVE-2025-31161 è una vulnerabilità critica di bypass dell'autenticazione nell'interfaccia web di CrushFTP. Manipolando l'head...

redexer

redexer Redexer è uno strumento di reingegnerizzazione che manipola i binari delle app Android. Questo strumento è in grado di analizzare un file DEX in una struttura dati in memoria; di dedurre con quali parametri l'app utilizza determinati permessi chiamiamo questa funzionalità RefineDroid; di...

EchoDrv

EchoDrv ECHOAC एंटी-चीट ड्राइवर echodriver.sys में कर्नेल रीड/राइट भेद्यता का दुरुपयोग करने की अनुमति देने वाला टूल। उपयोग उदाहरण प्रायोजक मैं POST Luxembourg में कार्यरत हूँ और उनका आभारी हूँ कि उन्होंने इस प्रोजेक्ट को विकसित करने और बनाए रखने के लिए मुझे कुछ समय आवंटित किया! POST वेबसाइट पर...

impersonate

Impersonate विवरण इस रिपॉजिटरी में वे टूलिंग्स हैं जो निम्नलिखित ब्लॉग पोस्ट https://sensepost.com/blog/2022/abusing-windows-tokens-to-compromise-active-directory-without-touching-lsass/ लिखते समय विकसित की गई थीं। ब्लॉग पोस्ट में टोकन हेरफेर आंतरिक तंत्र कैसे काम करता है और हम इसका उपयोग अपने ला...

CVE-2026-77789

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before acting on it, allowing a user with a confirmed portal session to cancel, reactivate or modify subscriptions...

CVE-2026-16986

The Booking Package WordPress plugin before 1.7.25 does not validate the payment amount server-side against the stored service price, deriving the expected charge from attacker-supplied request values instead, so an unauthenticated attacker can pay an arbitrary fraction of a service's real price...

CVE-2026-77695

CVE-2026-77695 affects the Return Refund and Exchange For WooCommerce WordPress plugin in versions prior to 4.6.4 . The root cause is that certain AJAX actions exposed to unauthenticated users do not correctly verify the ownership of guest orders . An unauthenticated attacker can exploit this to ...

CVE-2026-16986

The Booking Package WordPress plugin (versions before 1.7.25 ) contains an unauthenticated price manipulation vulnerability. The plugin fails to validate the payment amount server-side against the stored service price, instead deriving the expected charge from attacker-supplied request values (se...

WordPress Booking Package plugin < 1.7.25 - Unauthenticated Price Manipulation vulnerability

Unauthenticated Price Manipulation vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Booking Package versions 1.7.25...

CVE-2026-16986 Booking Package < 1.7.25 - Unauthenticated Price Manipulation via Service and Option Cost Parameters

The Booking Package WordPress plugin before 1.7.25 does not validate the payment amount server-side against the stored service price, deriving the expected charge from attacker-supplied request values instead, so an unauthenticated attacker can pay an arbitrary fraction of a service's real price...

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 e 2.4.50 Esecuzione Remota di Codice 🚨 CVE-2021-42013 si basa sulla vulnerabilità precedentemente identificata, CVE-2021-41773. Nonostante gli sforzi del team di Apache per affrontare CVE-2021-41773 nella versione 2.4.50, indagini successive hanno rivelato che la...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor ist ein Python-Dienstprogramm für die Manipulation und Ausnutzung von Gruppenrichtlinienobjekten GPOs. GPO-Angriffsvektoren können sehr oft zu wirkungsvollen Privilege-Escalation-Szenarien in Active-Directory-Umgebungen führen. Und dennoch zögern...

p3-loader

P³-Shellcode Loader - Process Parameter Poisoning Autores: Max Hirschberger & Ogulcan Ugur Conteúdo 1. Introdução 2. Injeção Típica de Processos e APIs de Sistema Envolvidas 3. Fundamento Técnico dos Internals do Windows Necessários 3.1 API de Criação de Processos e Parâmetros de Inicialização 3....

pytmipe

PYTMIPE & TMIPE PYTMIPE مكتبة بايثون لمعالجة الرموز المميزة وانتحال الشخصية لتصعيد الامتيازات هي مكتبة Python 3 لمعالجة رموز Windows وإدارة عمليات الانتحال بهدف الحصول على امتيازات إضافية على Windows. TMIPE هو العميل Python 3 الذي يستخدم مكتبة pytmipe. المحتوى عميل بايثون : tmipe python3 tmipe.py...

NimExec

NimExec In pratica, NimExec è uno strumento di esecuzione di comandi remoti senza file che utilizza il protocollo remoto di Service Control Manager MS-SCMR. Modifica il percorso binario di un servizio random o specificato eseguito da LocalSystem per eseguire il comando fornito sul target e lo...

chakra-2016-11

chakra.dll Info Leak + Type Confusion per RCE Exploit Proof-of-Concept per i bug di Edge CVE-2016-7200 e CVE-2016-7201 Testato su Windows 10 Edge modern.ie stabile. FillFromPrototypesTypeConfusion.html: WinExec notepad.exe FillFromPrototypesTypeConfusionNoSC.html: 0xcc INT 3 Per eseguire 1...

vpwn

vpwn by qwertyoruiop Sfruttamento generico di heap overflow in xnu. output di esempio: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin...