ActiveMQ-RCE-CVE-2023-46604-Write-up

This repository does not have a README...

cve-2019-9787_csrf_poc

CVE-2019-9787 CSRF PoC Overview PoC of CVE-2019-9787 CSRF WordPress Version 5.0 refference Do not use this except for test purpose. Installation root@kitploit: $ docker-compose up -d 1. access http://localhost:8080/ and install WordPress. you only have to create WP admin account. 2. access...

catalyst

Catalyst Acelera tus reacciones Sitio web - El Manual de Catalyst Documentación - Demostración Catalyst es una plataforma de respuesta a incidentes. Puede ayudar a automatizar la gestión de alertas y los procedimientos de respuesta a incidentes. Características Gestión de Tickets Alertas e...

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Instalación Instale el paquete metashieldcleanup usando pip:: root@kitploit: pip install metashieldcleanup Uso Ejemplo para limpiar un archivo. .. code-block:: python root@kitploit: import time import base64 from metashieldcleanup.api...

jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4

Complemento de cliente Git Introducción El complemento de cliente Git proporciona interfaces de programación de aplicaciones API de Git para complementos de Jenkins. Puede obtener fetch, hacer checkout, crear ramas, listar, fusionar y etiquetar repositorios. Consulte la documentación de la API pa...

bash-up

bash-up un script automático para corregir la vulnerabilidad bash CVE-2014-6271...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. root@kitploit: Compile make all Create mount point for fuse filesystem mkdir -p...

fav-up

Fav-up Búsquedas de IP real a partir del icono favicon y usando Shodan. Instalación pip3 install -r requirements.txt Clave de API de Shodan no la gratuita Uso CLI Primero define cómo pasas la clave de API: -k o --key para pasar la clave por stdin -kf o --key-file para pasar el nombre del archivo...

CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Beam me up Scotty – Back to Top Button Vulnerable version = 1.0.23 Component slug beam-me-up-scotty Component link https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...

CVE-2025-23369

CVE-2025-23369 Exploit de CVE-2025-23369, explicación aquí...

CVE-2024-41992-PoC

PoC 针对 CVE-2024-41992。 CVE 分析文章 FR : https://fj016.fr/blog/cve-2024-41992...

TileServer API - Cross Site Scripting

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. id: CVE-2024-35627 info: name: TileServer API - Cross Site Scripting author: DhiyaneshDK severity: medium description: | tileserver-gl up to v4.4.10 was discovered to...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-8760

Proof of Concept for CVE-2025-8760 Detailed write-up is available here...

CVE-2023-32629

CVE-2023-32629 — OverlayFS Local Full Privilege Escalation OverlayFS Local Privilege Escalation - Full write-up to full escalation For educational and authorized security research purposes only. Severity: High Type: Local Privilege Escalation LPE Affected: Ubuntu kernels prior to May/June 2023...

CVE-2023-38831

CVE-2023-38831 Installation Vagrant 2.4.0 root@kitploit: vagrant up...

Eternal-Blue-CVE-2017-0144-THM-Write-Up

Este repositorio no tiene un README...

CVE-2023-0386_POC

Equipo CVE-MD Este repositorio proporciona una prueba de concepto para CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Miembros del equipo: Bǎnicǎ Dragoș-Marius y Borsos Matheas-Roland Aquí está el video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Escalada de...

CVE-2026-81778

Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...