CVE-2023-50072

CVE-2023-50072 Eine gespeicherte Cross-Site-Scripting XSS-Schwachstelle existiert in OpenKM Version 7.1.40 dbb6e88 mit Professional Extension, die es einem authentifizierten Benutzer ermöglicht, eine Notiz zu einer Datei hochzuladen, die als gespeichertes XSS-Payload fungiert. Jeder Benutzer, der...

CVE-2022-26134

CVE-2022-26134 POC Descrizione root@kitploit: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. POC 1. Esegui python3 confluence.p...

CVE-2025-2783

SandBoxEscapeSim CVE-2025-2783: Simulazione Educativa di Sandbox Escape per Chrome Autore: Byte Reaper @ByteReaper0 Panoramica Questo progetto è una simulazione orientata alla ricerca e educativa progettata per dimostrare il concetto di una vulnerabilità di sandbox escape all'interno di Google...

CVE-2021-4034

Python3 code per sfruttare CVE-2021-4034 PWNKIT. Questo è stato un esercizio per "posso farlo funzionare in Python?", e non è pensato come un exploit robusto. Funziona per me, ci sono probabilmente bug. Il payload predefinito avvia una shell come root, generato da msfvenom: root@kitploit: msfveno...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413-Vulnerabilidade-de-Execução-Remota-de-Código-do-Microsoft-Outlook Este script apresenta uma prova de conceito PoC para o CVE-2024-21413, uma vulnerabilidade crítica descoberta no Microsoft Outlook com pontuação CVSS 9.8. Conhecida como erro MonikerLink, esta vulnerabilidade tem...

Apache-Struts-2-CVE-2017-5638-Exploit-

Apache-Struts-2-CVE-2017-5638-Exploit Questo exploit sfrutta la vulnerabilità Apache Struts2 CVE-2017-5638, permettendoci di eseguire comandi remotamente sul server Apache. How to use: $ sudo python Struts2Shell001.py root@kitploit: ! Exploit Apache Struts2 DEMO Code of Rvbk + HOST con https Sito...

blankspace

Blank Space Blank Space è un refactoring del proof of concept originale di James Forshaw per CVE-2021-43893, escalation di privilegi tramite caricamento arbitrario di file EFSRPC. Blank Space può creare file arbitrari su un host remoto che utilizza la delega non vincolata se non è stato aggiornat...

CVE-2026-5281-CVE-2026-11057-fullchain

CVE-2026-5281+CVE-2026-11057 Android fullchain Dispositivo Pixel 7 Android 16 ARM64 Versione Chromium root@kitploit: commit 994c846bbd7a35241ba7c08158c13d66412a6993 HEAD - 146.0.7680.111, tag: 146.0.7680.111 Author: Roger McFarlane Date: Mon Mar 9 12:48:07 2026 -0700 Descrizione Approccio di...

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added six flaws to its Known Exploited Vulnerabilities KEV catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The...

CVE-2021-32099

CVE-2021-32099 CVE-2021-32099 POC : http://localhost:8000/pandoraconsole/include/chartgenerator.php?sessionid=a%27%20UNION%20SELECT%20%27a%27,1,%27idusuario|s:5:%22admin%22;%27%20as%20data%20FROM%20tsessionsphp%20WHERE%20%271%27=%271 Dettaglio :...

CVE-2026-2441-PoC

CVE-2026-2441 — Use-After-Free in Chrome CSSFontFeatureValuesMap CVSS 8.8 Alto | Sfruttata attivamente in natura | RCE nel Renderer Sandboxed Una vulnerabilità use-after-free nel motore CSS Blink di Google Chrome che consente a un attaccante remoto di eseguire codice arbitrario all'interno della...

fbconsulting_v0_chat

Chat SDK Chat SDK è un template gratuito e open-source creato con Next.js e l'AI SDK che ti aiuta a creare rapidamente potenti applicazioni chatbot. Leggi la Documentazione · Funzionalità · Provider di Modelli · Distribuisci il Tuo · Esecuzione Locale Funzionalità Next.js App Router Routing...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

CVE-2026-80546

A flaw was found in the Linux kernel's s390/zcrypt component, specifically within the xcrbmsgtotype6cprbmsgx function. This vulnerability is due to insufficient input validation, which can lead to integer overflows during memory allocation and arithmetic operations, as well as a lack of minimum...

CVE-2023-49314

CVE-2023-49314 Asana Desktop 2.1.0 unter macOS ermöglicht Code-Injection aufgrund bestimmter Electron Fuses. Es besteht ein unzureichender Schutz gegen Code-Injection durch Einstellungen wie RunAsNode und enableNodeCliInspectArguments, und daher kann electroniz3r verwendet werden, um einen Angrif...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Überblick Dieser Code ist die Python-Version des POC für CVE-2023-32315. Er führt eine Reihe von Aktionen aus, um zu überprüfen, ob die Zielwebsite von der Schwachstelle CVE-2023-32315 betroffen ist, und versucht, einige Aktionen auf den...

CVE-2019-11043

CVE-2019-11043 Python exp per CVE-2019-11043 root@kitploit: You can use build environment from https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 Utilizzo: root@kitploit: python3 main.py -u http://iptopage/index.php Se hai successo, vedrai: root@kitploit: Base status code is 200...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remotecodeausführungs-Schwachstelle EXP&POC Reproduktion forforever：https://www.cnblogs.com/forforever/p/13846077.html POC CVE-2020-16898Checker-poc Befehl: PowerShell/CMD als Administrator starten root@kitploit: Powershell.exe -ExecutionPolicy...

dirty-frag-check

Dirty Frag check CVE-2026-43284 / CVE-2026-43500 Read-only checker for the "Dirty Frag" Linux kernel local-root vulns CVE-2026-43284, CVE-2026-43500. Checks kernel version, module state, KernelCare livepatch, and any modprobe blacklist you've added. Doesn't run exploit code. Companion to...

CVE-2024-4577

🚀 CVE-2024-4577: PHP-CGI-Argument-Injection-Scanner und -Exploit 🛡️ Übersicht CVE-2024-4577 ist eine kritische Schwachstelle , die PHP-Anwendungen betrifft, die die Common Gateway Interface CGI verwenden. Dieses Tool dient sowohl als Scanner als auch als Exploit und ermöglicht...