CVE-2022-44721-CsFalconUninstaller

CVE-2022-44721 Crowdstrike Falcon Uninstaller CrowdStrike Falcon is a cloud-powered endpoint detection and response EDR and antivirus AV solution. On each end-device a kernel level managed sensor is deployed and makes use of the cloud-based capabilities. The sensor can be configured with an...

SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script root@kitploit: Usage: python3 CVE-2020-5844.py URL USER...

EUVD-2026-79215

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

EUVD-2026-79199

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2022-1903

CVE-2022-1903 root@kitploit: Title: ARMember 3.4.8 - Unauthenticated Admin Account Takeover Author: Cyllective https://cyllective.com/ CVE: CVE-2022-1903 安装 root@kitploit: git clone https://github.com/biulove0x/CVE-2022-1903.git cd CVE-2022-1903/ python3 -m pip install -r requirements.txt 如何运行自动利...

r0ak

r0ak r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek root@kitploit: r0ak v1.0.0 -- Ring 0 Army Knife...

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

CVE-2026-16232

CVE-2026-16232 — Check Point SmartConsole 认证绕过 从未认证网络访问 到完整管理员权限 的认证绕过 PoC。单文件,Python 3 纯标准库零依赖。 漏洞简述 管理服务器 Java 登录服务 authenticateRemoteApplication 直接接受攻击者提供的 SIC DN 字符串作为身份 ,而不是把它绑定到经 TLS 客户端证书认证的真实 DN。攻击者从未认证的 SIC 引导通信中读取管理服务器自身的 SIC DN 并回放,即可:伪造应用身份 → 获取应用令牌 → 通过 gen-sso-token 铸造 SmartConsole...

iTop-CVEs-exploit

iTop-CVEs-exploit 该仓库包含针对 iTOP CVE-2024-52002、52000、31998、31448 的漏洞利用程序，这些漏洞通过 CSRF+XSS 链式攻击，获取软件管理员权限。 环境搭建 1. 从 Docker 下载存在漏洞的 iTOP 版本 root@kitploit: sudo docker run -d -p 8090:80 --name=my-itop2 vbkunin/itop:3.1.1 2. 访问 localhost:8090 并执行标准安装 3. 使用以下命令获取密码 root@kitploit: sudo docker logs...

CVE-2018-8090

CVE-2018-8090 DLL Hijacking in Quickheal Total Security/ Internet Security/ Antivirus Pro Installers Affected Products: Quick Heal Total Security - 17.00 Quick Heal Internet Security - 17.00 Quick Heal AntiVirus Pro - 17.00 Affected Installers: Quick Heal Total Security 64 bit 17.00 QHTS64.exe,...

CVE-2019-12562

CVE-2019-12562 CVE-2019-12562 DotNetNuke DNN 9.4.0 之前版本中存在存储型跨站脚本漏洞，允许远程攻击者将恶意脚本存储并嵌入到管理员通知页面。该漏洞可用于执行任何管理员权限的操作，例如管理内容、添加用户、上传后门到服务器等。当管理员用户访问包含存储型跨站脚本的通知页面时，漏洞利用成功。 利用方法 配置漏洞利用文件 root@kitploit: TARGETURL = "http://targetdomain/DotNetNuke" USERNAME = "MAYASEVEN" 至少五个字符 PASSWORD = "P@ssw0rd"...

System Dashboard < 2.8.15 - Admin+ Path Traversal

The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server id: CVE-2024-10708 info: name: System Dashboard 2.8.15 - Admin+ Path...

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

CVE-2021-39115

CVE-2021-39115 邮件模板注入导致Jira Service Management Server上的代码执行 I 构建 我已在此处指导了部署+调试 在此，大家可以参考。 II 分析 在 描述 中，此CVE已明确指出漏洞位于Email Template功能。拥有管理员权限的用户可以随意修改通知邮件的模板。此漏洞需要管理员权限才能利用，因此即使有RCE也不严重，但我仍决定写这篇博客以娱乐为目的 : 正在研究SSTI的朋友可以参考。...

MSDIA-x64

从这里安装 Visual C++ 可再发行组件：https://go.microsoft.com/fwlink/?LinkId=746572 2. 以管理员身份运行 install.bat...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit...

CVE-2019-9193byVulHub

CVE-2019-9193byVulHub Ejecución de comandos arbitrarios con privilegios de administrador en PostgreSQL CVE-2019-9193 Descripción PostgreSQL es un potente sistema de gestión de bases de datos relacional de código abierto. Una vulnerabilidad presente en las versiones de la 9.3 a la 11 permite a los...

CVE-2025-11001

Usage: root@kitploit: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploiting 7-zip The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be...