4303 matches found
CVE-2023-22515
CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...
exim.exp
Simple exploit for vuln in exim 4.87 - 4.91 inclusive...
CVE-2020-9484
CVE-2020-9484 Apache Tomcat RCE CVE-2020-9484 Affected versions are: Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache Tomcat 8.x 8.5.55 Apache Tomcat 7.x 7.0.104...
CVE-2023-43494
CVE-2023-43494 Jenkins 2.50 through 2.423 both inclusive, LTS 2.60.1 through 2.414.1 both inclusive File Read References: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...
CVE-2026-18780
Cross-Site request forgery CSRF vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...
CVE-2026-18931 Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Software
Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retrieve Embedded Sensitive Data. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...
CVE-2025-24893
PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...
apache__dubbo_CVE-2021-30180_2-7-9
Apache Dubbo Project...
Astro Cloudflare Adapter - Server Side Request Forgery
Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...
CVE-2025-52914
CVE-2025-52914 How does this detection method work? Versions are extracted from target hosts, specifically the SVRVER html response in the body, and then matches on versions prior to 9.3.1 and versions from 10.0.26 to 10.1.101 inclusive. How do I run this script? 1. Download Nuclei from here 2...
cve-2022-42889
cve-2022-42889 cve-2022-42889 Text4Shell affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10. references: https://securitylab.github.com/advisories/GHSL-2022-018ApacheCommonsText/ https://github.com/karthikuj/cve-2022-42889-text4shell-docker...
cve-2023-50164
CVE-2023-50164 Vulnerable versions Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 Versions where the vulnerability is fixed Struts 2.5.33 Struts 6.3.0.2 Search Script Windows/PowerShell For PowerShell 5.1 and newer. Written by Kjetil Sigvartsen at Norsk...
cve-2021-22146
cve-2021-22146 I found during a internal pentest a vulnerability on elastic ECE. Elasticdump is a PoC for CVE-2021-22146 to dump database from elastic ece from 7.10.0 to 7.13.3 https://www.exploit-db.com/exploits/50152 Collaborators: Mario Díaz Caldera...
safer-eval-cve-CVE-2019-10760
safer-eval-cve-CVE-2019-10760 The following proof-of-concept POC exploit addressing safer-eval version 1.3.1 and below is the first publicly known payload to attack this version range. Contributing Please consult CONTRIBUTING for guidelines on contributing to this project...
CVE-2023-23752
Joomla! information disclosure - CVE-2023-23752 exploit Exploit for CVE-2023-23752 4.0.0 = Joomla = 4.2.7. Usage Before using the project we need to install the required packages I recommend creating a virtual environment first root@kitploit: pip install -r requierements.txt Proof of Concept To...
CVE-2023-23946
CVE-2023-23946 Exploit This repository contains a functional Proof of Concept PoC exploit for CVE-2023-23946 , affecting Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. Demonstration Usage root@kitploit: git clone...
CVE-2023-23752_Joomla
CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure A proof-of-concept for CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure. For versions 4.0.0 4.2.8 it means from 4.0.0 up to 4.2.7. Getting Started Executing program With python3 root@kitploit: python3...
asf__commons-io_CVE-2021-29425_2-6
Apache Commons IO The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Documentation More information can be found on the Apache Commons IO homepage. The JavaDoc can be browsed. Questions...
CVE-2026-16723
CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...