391 matches found
CVE-2021-46067
CVE-2021-46067 Título del Exploit: Vehicle Service Management System - 'Múltiple' Robo de Cookies Conduce a la Toma Total de la Cuenta Autor del Exploit: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRÍTICO Referencias:...
WannaRace
🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...
CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX
FreePBX CVE-2025 Vulnerability Scanner ⚠️ DISCLAIMER FOR EDUCATIONAL AND AUTHORIZED TESTING ONLY This tool is provided "AS IS" for educational and research purposes only Authors are NOT responsible for any misuse or illegal activities Unauthorized access to computer systems is ILLEGAL Only use on...
CVE-2024-22120-RCE-with-gopher
Usage root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hosti...
CVE-2025-62369
CVE-2025-62369 PoC This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener root@kitploit: nc -lvnp 2. Run the exploit root@kitploit: python3 exploit.py -u "http://:" -s "" -i -p : Xibo CMS server...
CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php
Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...
CVE-2008-6279
RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message...
CVE-2020-12258
rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application can reuse a session via PHPSESSID. Also, an attacker can exploit this vulnerability in conjunction with CVE-2020-12256 or CVE-2020-12259...
EUVD-2007-1960
Malware in sbrugna...
EUVD-2017-4486
Malware in sbrugna...
EUVD-2007-6436
Malware in sbrugna...
EUVD-2007-1099
Malware in sbrugna...
EUVD-2007-1946
Malware in sbrugna...
EUVD-2007-2970
Malware in sbrugna...
EUVD-2012-4201
Malware in sbrugna...
EUVD-2007-3042
Malware in sbrugna...
EUVD-2021-25651
Malware in sbrugna...
EUVD-2014-8538
Malware in sbrugna...