CVE-2025-55182-RCE-Exploit

إثبات المفهوم لـ CVE-2025-55182 – تنفيذ التعليمات البرمجية عن بُعد في Next.js 16.0.6 يحتوي هذا المستودع على إثبات مفهوم POC عامل لـ CVE-2025-55182 ، وهي ثغرة أمنية حرجة لإلغاء التسلسل تؤثر على Next.js 16.0.6. يستغل الاستغلال إلغاء تسلسل الكتلة $@ و Chunk.prototype.then للحصول على سيطرة كاملة على...

CVE-2021-46703

CVE-2021-46703 सरल पेलोड निर्माता POC पर आधारित: https://github.com/Antaris/RazorEngine/issues/585 उपयोग C root@kitploit: dotnet build --configuration Release .\bin\Release\net4.8\Poc.exe "System.IO.File.WriteAllText"rce.txt", "Hello World";" Python root@kitploit: ./poc.py...

log4j-rce-CVE-2021-44228

ملخص مشروع لاختبار ثغرة تنفيذ التعليمات البرمجية عن بُعد في log4j2 CVE-2021-44228 عمليًا. تشغيل الحاويات root@kitploit: docker-compose up تستغرق حاوية log4j بعض الوقت حتى تصبح جاهزة بعد بدء التشغيل. تحقق من التقدم باستخدام الأمر التالي: root@kitploit: docker logs -f log4j عند ظهور الرسالة Server...

l4s-vulnapp

Log4Shell Vulnerable Applicationl4s-vulnapp This is a potentially vulnerable Java web application containing Log4j2.14.1 affected by log4shellCVE-2021-44228. Verified environment and various versions AdoptOpenJDK 17.0.10+7 Gradle 8.6 Gretty 4.1.2 Apache Tomcat 10.1.15 Apache Log4j Core 2.14.1...

Poleposph

Poleposph Tools for scan CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution RCE...

CVE-2016-2098

CVE-2016-2098 Action Pack в Ruby on Rails до версий 3.2.22.2, 4.x до 4.1.14.2 и 4.2.x до 4.2.5.2 позволяет удаленным злоумышленникам выполнять произвольный Ruby-код, используя неограниченное использование метода render в приложении RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Использование...

CVE-2023-42793

CVE-2023-42793 TeamCity CVE-2023-42793 RCE Remote Code Execution rce.py Inspired by - https://www.prio-n.com/blog/cve-2023-42793-attacking-defending-JetBrains-TeamCity python3 rce.py --url teamcity.runner.htb --command whoami exploit.py This script is copy of...

CVE-2021-27876

CVE-2021-27876 Unauthenticated RCE exploit for Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA auth bypass to SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentication bypass via SHA hash manipulation in the NDMP protocol| 9.8 Critical CVE-2021-27877|...

CVE-2013-0156

मूल स्क्रिप्ट संदर्भ मूल एक्सप्लॉइट स्क्रिप्ट के बारे में अधिक जानकारी के लिए, gist लिंक CVE-2013-0156 देखें। CVE-2013-0156 एक्सप्लॉइट स्क्रिप्ट यह स्क्रिप्ट विशेष रूप से PentesterLab पर CVE-2013-0156 एक्सप्लॉइट के लिए चुनौती को हल करने के लिए डिज़ाइन की गई है। आप यहाँ चुनौती तक पहुँच सकते हैं:...

CVE-2018-7600

CVE-2018-7600 Drupalgeddon2 Exploit – Python3 DISCLAIMER: This project is for educational and authorized penetration testing purposes only. Do NOT use this code on systems you do not own or have explicit written permission to test. Unauthorized use is illegal and punishable by law. The author...

CVE-2022-36804-ReverseShell

मूल परियोजना https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit CVE-2022-36804 BitBucket गंभीर कमांड इंजेक्शन के लिए एक अपेक्षाकृत विश्वसनीय PoC शोषण। यह हमला आमतौर पर सार्वजनिक रिपॉजिटरी सक्षम होने की आवश्यकता होती है, हालांकि सत्र कुकीज़ भी इस शोषण के साथ संगत...

CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authenticated Command Injection in Configuration Wizard Simple proof of concept repository for CVE-2025-34227, an authenticated command injection in Nagios XI - Configuration Wizard Full writeup here: https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/...

CVE-2024-25600

संशोधित CVE-2024-25600 मूल - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE एक्सप्लॉइट CVE-2024-25600 के लिए एक Python एक्सप्लॉइट - WordPress Bricks Builder रिमोट कोड एक्जीक्यूशन कमजोरी। विवरण यह उपकरण WordPress Bricks Builder प्लगइन में एक गंभीर कमजोरी का शोषण...

CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 تكرار CVE-2021-45105 API root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' الإخراج: الهجوم root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' الإخراج: السجلات: المراجع: https://vulners.com/cve/CVE-2021-45105...

CVE-2024-47176

CVE-2024-47176 CUPS Common UNIX Printing System هو نظام طباعة يستخدم بشكل أساسي بروتوكول IPP Internet Printing Protocol وغيره لإدارة مهام الطباعة والطوابير. في 27 سبتمبر 2024، تم الكشف على الإنترنت عن تفاصيل تنفيذ تعليمات برمجية عن بُعد في Unix CUPS، حيث تتضمن سلسلة الاستغلال عدة CVEs...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 POC example provided by BurpRoot CVE-2022-24086: Overview Affected Software: Magento2 CVE ID: CVE-2022-24086 CVSS Score: 9.8 Critical Description CVE-2022-24086 is a critical security vulnerability affecting multiple versions of the Magento2 e-commerce platform. This...

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerability is RCE vulnerability in outdated eval-stdin.php. This exploit is just automation for mentioned vulnerability and is still in development. Scripted in Ruby 3.0.4 within 2 hours, tested on Kali linux, Arch Linux, Ubuntu minimal and Termux. How to...

CVE-2025-43300

📚 CVE-2025-43300 - Detailed Vulnerability Analysis 🎯 Summary CVE-2025-43300 is a buffer overflow vulnerability in DNG Digital Negative file processing caused by an inconsistency between TIFF metadata and JPEG data , allowing remote code execution RCE. 🔍 1. DNG FILE ANATOMY Layered Structure:...

redis-stack-CVE-2024-55656

CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow Remote Code Execution Vulnerability Title: Redis Stack RedisBloom Integer Overflow Remote Code Execution Vulnerability ZDI: ZDI-25-009 CVE: CVE-2024-55656 Credits: rick2600 and gqsilva CVSS: 8.8 HIGH Affected version: RedisBloom v2.6.12...

l4j-tp1

log4shell true positive This is a simple web project with a log4shell vulnerability. The project defines a simple scabench.HelloWorldService get service returning a plain text string hello world. The service does not expect parameters, and if parameters are encountered, an error is logged. The...