CVE-2023-21716-POC

History In February 2023, Microsoft patched a critical vulnerability in Microsoft Word, identified as CVE-2023-21716 with a CVSS score of 9.8, which could allow attackers to execute remote code without authentication. This vulnerability also affected the Outlook Preview Pane, meaning it can be...

CVE-2020-14372

CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...

CVE-2022-24112_POC

POC Collected POCs CVE-2022-24112 To set up the Chunqiu Cloud Environment: CVE-2022-24112 target environment, two POCs were modified, slightly adapted from the POCs of M4xSec and twseptian for the Chunqiu Cloud Environment: Chunqiu Cloud Environment: CVE-2022-24112: Apache APISIX is a cloud-nativ...

RCE-CVE-2025-32710

RCE-CVE-2025-32710 Windows Remote Desktop Services Vulnerability Allows Remote Code Execution root@kitploit: 💥 RDP Auto-Pwn RCE-CVE-2025-32710 Eksploitasi Otomatis untuk Layanan RDP yang Rentan BlueKeep & Beyond 🔓 Membuat akun admin • 🪟 Mengaktifkan RDP • 📶 Verifikasi akses otomatis --- ⚠️...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

CVE-2019-9624

CVE-2019-9624 Authenticated RCE for Webmin 1.9.0 Webmin 1.900 Authenticated RCE - CVE-2019-9624 Exploit 1. Vulnerability Description CVE-2019-9624 is an authenticated Remote Code Execution RCE vulnerability in Webmin versions up to 1.900. It allows an administrative user to execute arbitrary...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

CVE-2025-24893

CVE-2025-24893 root@kitploit: Exploit Title: XWiki 15.10.10 - Unauthenticated Remote Code Execution Date: 09/08/2025 Exploit Author: D3Ext Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: 15.10.10 Tested on: Kali Linux 2025 CVE: CVE-2025-2489...

exploit-CVE-2023-27564

Exploit for CVE-2023-27564 This vulnerability allows anonymous file read in n8n. root@kitploit: import requests url = "https://example.com/rest/data/filesystem:..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd:.svg" response = requests.geturl printresponse.statuscode printresponse.headers...

CVE-2022-40684

CVE-2022-40684 One-click enumeration of all usernames and writing SSH public key Integrated and optimized the code from these two repositories to achieve one-click enumeration of all usernames and writing SSH public key results: https://github.com/carlosevieira/CVE-2022-40684/blob/main/exploit.py...

CVE-2024-4879

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879 Description: ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington, D.C. Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute...

kube-hunter

Notice kube-hunter is not under active development anymore. If you're interested in scanning Kubernetes clusters for known vulnerabilities, we recommend using Trivy. Specifically, Trivy's Kubernetes misconfiguration scanning and KBOM vulnerability scanning. Learn more in the Trivy Docs. kube-hunt...

gsscred-move-uaf

GSSCred-move-uaf The com.apple.GSSCred XPC service, which runs as root on macOS and iOS, does not properly implement the "move" command, leading to a use-after-free condition in the doMove function. The GSSCred service can be reached from within the default application sandbox on iOS. This progra...

CVE-2014-0472

CVE-2014-0472 Use root@kitploit: docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect...

CVE-2023-39063

CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down...

CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Exploit Title: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Date: 2022-01-09 Exploit Author: Hamdi Sevben Vendor Homepage:...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...