Polkit-CVE-2021-4034-HLP

Polkit-CVE-2021-4034-HLP Polkit CVE-2021-4034 の高水準プログラミング言語での悪用 ビルド root@kitploit: make LHOST=ip.or.domain.tld LPORT=8000 使用方法 TCP ポートリスナーを開きます。例として ncat をループバックで使用 root@kitploit: ncat -vl 127.0.0.1 8000 エクスプロイトを実行 root@kitploit: php $ARCHexploit.php python $ARCHexploit.py...

CVE-2021-3831

PHP Exploit CVE-2021-3831 スクリプト 概要 このPHPスクリプトは、特定のMD5ハッシュを生成し、HTTPリクエストを送信して対象ウェブサイトとやり取りすることで、潜在的な脆弱性を悪用するように設計されています。教育目的を意図しており、脆弱性のテストを行う明示的な許可がある環境でのみ使用する必要があります。 特徴 動的ターゲット入力: スクリプトはコマンドライン引数としてターゲットURLを受け取り、柔軟な使用を可能にします。 安全なHTTPリクエスト: HTTPリクエストを行うためにcURLを利用し、堅牢なエラーハンドリングとセキュリティを提供します。...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 リバースシェルアップロード Mt-Code POC を少し修正したバージョンで、Webシェルではなく完全なリバースシェルを起動します。 このエクスプロイトは、有名な PentestMonkey PHP Reverse Shell を使用しています。 インストール pip install -r requirements.txt 使用例: アプリケーション上でユーザーを作成する 次を実行する python exploit.py http://target/index.php myuser mypassword...

CVE-2026-11485

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation of the argument sy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly...

📄 Mutiny 5.0-1.07 Directory Traversal

Mutiny version 5.0-1.07 directory traversal proof of concept exploit that demonstrates an issue originally discovered in 2013. ============================================================================================================================================= | Title : Mutiny 5.0-1.07...

📄 ZITADEL 4.7.0 Server-Side Request Forgery

This is a ZITADEL version 4.7.0 server-side request forgery proof of concept exploit written in PHP. ============================================================================================================================================= | Title : ZITADEL 4.7.0 SSRF Exploit - PHP Version | |...

EUVD-2018-11209

Malware in sbrugna...

EUVD-2006-0694

Malware in sbrugna...

EUVD-2017-2606

Malware in sbrugna...

EUVD-2008-3386

Malware in sbrugna...

EUVD-2018-10891

Malware in sbrugna...

EUVD-2022-2615

Malicious code in bioql PyPI...

Exploit for Out-of-bounds Write in Php

Task Management APP CVE-2019-11043 Lab Minimal PHP app with...

CVE-2025-54139

CVE-2025-54139 affects HAX CMS NodeJS and PHP backends. Versions haxcms-nodejs ≤ 11.0.12 and haxcms-php ≤ 11.0.7 expose pages without anti-iframe headers, enabling unauthenticated attackers to load sensitive pages (including login) in an iframe and perform a UI redress (clickjacking). Impact is U...

WordPress GiftXtore plugin file inclusion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress GiftXtore plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...

Exploit for CVE-2024-32830

CVE-2024-32830-poc PoC code to download files with CVE-2024-32...

Advantech WebAccess 7.1 SQL Injection

Advantech WebAccess version 7.1 proof of concept exploit that demonstrates a SQL injection vulnerability original discovered in 2014. ============================================================================================================================================= | Title : Advantech...

Ghostscript 9.21 Arbitrary Command Execution

Ghostscript version 9.21 exploit that leverages a flaw from 2017 to execute arbitrary commands and provides a reverse shell. ============================================================================================================================================= | Title : Ghostscript versions...

Linux Distros Unpatched Vulnerability : CVE-2016-3185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The makehttpsoaprequest function in ext/soap/phphttp.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote...

Linux Distros Unpatched Vulnerability : CVE-2015-6836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SoapClient call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows...