270150 matches found
CVE-2021-1675_PrintNightMare
PrintNightmareScanner Scanner to detect Windows Print Spooler Remote Code Execution Vulnerability CVE-2021-1675 Prerequisite's python3 python3 -m pip install -r Requirements.txt Usage python3 detectprintnightmare.py --help root@kitploit: usage: detectprintnightmare.py -h -t TARGET -T TARGETS -c...
GPON-LOADER
GPON-LOADER مُحمّل استغلال لتنفيذ التعليمات البرمجية عن بُعد مع حمولة على أجهزة بوابات GPON المنزلية CVE-2018-10562 مكتوب بلغة Python. التبعيات requests الاستخدام root@kitploit: python gpon-loader.py...
DrupalCVE-2018-7602
ثغرة تنفيذ التعليمات البرمجية عن بعد في Drupal CVE-2018-7602 البرنامج المتأثر: drupal الأسلوب: تشفير في عنوان URL مرتين لتجاوز فلتر دالة sanitize التأثير: تنفيذ أي أمر بيئة الثغرة قم بتنفيذ الأمر التالي لتشغيل بيئة Drupal 7.57: root@kitploit: docker-compose up -d بعد تشغيل البيئة، قم بزيارة...
Confluence-CVE-2022-26134
Confluence-CVE-2022-26134 Description Confluence unauthorize remote code execution vulnerability : CVE-2022-26134 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Da...
CVE-2018-5767-AC9
Research and Author David Baker Article: Sometimes Exploits Need Patches Too! Working Through a Change of Address External link CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 root@kitploit: The following is an actualization of...
AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution
AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 Authenticated Older versions likely affected https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution...
CVE-2019-12725-Command-Injection
POC CVE-2019-12725-Remote-Command-Execution ZeroShell 3.9.0 Remote Command Injection Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this iss...
cacti-cve-2022-46169-exploit
CVE-2022-46169 PoC: Authentication Bypass and Remote Code Execution This repository contains a PoC for the CVE-2022-46169 vulnerability, which allows an attacker to bypass authentication and execute arbitrary code remotely on the affected system. This vulnerability affects Cacti, version 1.2.22,...
CVE-2025-25257
Table of Contents Overview Vulnerability Details Proof of Concept PoC Trolled2 Trolled3 Overview CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. This flaw allows attackers to inject malicious SQL commands into th...
panos-captive-portal-rce
CVE-2026-0300 — Scanner du débordement de tampon RCE du Captive Portal User-ID PAN-OS...
CVE-2022-29464
CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...
CVE-2025-31324_PoC_SAP
CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...
CVE-2022-22954
CVE-2022-22954 Attention Please use this at your own risk. This repo is meant only for educational purposes and we are strictly against all illegal intentions and we would not be responsible of any illegal activities associated with this repo. Be ethical! Example root@kitploit: python3...
zoneminder-snapshots-rce-poc
Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...
CVE-2022-22963
CVE-2022-22963 Exécution de code à distance exploitant CVE-2022-22963 attaquant le service Spring Cloud. Avertissement : Ceci est à des fins éducatives uniquement. L'auteur n'est pas responsable de l'utilisation de ce programme. Utilisez-le à vos propres risques. Utilisation root@kitploit:...
CVE-2025-5777-TrendMicro-ApexCentral-RCE
🚨 CVE-2025-5777 – Trend Micro Apex Central Auth Bypass + RCE 🔎 Overview CVE-2025-5777 is a critical authentication bypass and remote code execution RCE vulnerability discovered in Trend Micro Apex Central. It allows unauthenticated attackers to execute arbitrary commands on the system by abusing ...
CVE-2023-45878
CVE-2023-45878 GibbonEdu Arbitrary File Write to Web Shell Execution Description This repository contains an exploit for CVE-2023-45878 , an arbitrary file write vulnerability in GibbonEdu. The vulnerability affects the rubricsvisualisesaveAjax.php endpoint and allows an unauthenticated attacker ...
Confluence-CVE-2022-26134
Confluence-CVE-2022-26134 dork en shodan root@kitploit: https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 Curl poc root@kitploit: curl -v...
irule-cve-2022-22965
irule-cve-2022-22965 This is a basic iRule to provide some mitigation against CVE-2022-22965 a.k.a. Spring4Shell. Tested on BIG-IP 15.x. Overview On March 30, 2022, a remote code execution RCE vulnerability was found in the Java Spring Framework, identified by the CVE 2022-22965. I am sharing an...