516497 matches found
CVE-2003-0264-SLmail-5.5
CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 バッファオーバーフロー 参照 https://vulners.com/cve/CVE-2003-0264 脆弱性 SLMail は POP3 パスワードの送信時に境界チェックを行いません。 そのため、SLMail サーバーに対して長大で不正な形式の POP3 PASS を送信することにより、任意のコードを実行できます。...
CVE-2021-41773-Apache-RCE
CVE-2021-41773-Apache-RCE 在 Apache HTTP Server 2.4.49 的路径规范化变更中发现了一个缺陷。攻击者可以使用路径遍历攻击，将 URL 映射到由类似 Alias 指令配置的目录之外的文件。如果这些目录外的文件没有受到通常默认配置 "require all denied" 的保护，这些请求可能会成功。如果还为这些别名路径启用了 CGI 脚本，则可能导致远程代码执行。已知该问题已在野外被利用。此问题仅影响 Apache 2.4.49，不影响早期版本。Apache HTTP Server 2.4.50 中的修复被证实不完整，请参见...
CVE-2004-2271-MiniShare-1.4.1-BOF
CVE-2004-2271 - MiniShare 1.4.1 - BOF 参考文献 https://nvd.nist.gov/vuln/detail/CVE-2004-2271 脆弱性 MiniShare 1.4.1 は、受信した HTTP GET リクエストに対して境界チェックを行いません。 長く不正な形式の HTTP GET リクエストを送信することで、攻撃者はバッファオーバーフローを引き起こし、システム上で任意のコードを実行できます。 エクスプロイトノート EIP が上書きされた後、シェルコードに使用できるスペースは 210 バイトのみです。...
CVE-2024-4040
Exploit Code for CVE-2024-4040 Overview This exploit code targets the CVE-2024-4040 vulnerability, allowing unauthorized access to user accounts by reading and validating tokens stored in the "sessions.obj" file. If the tokens are valid, hackers can gain entry to the targeted accounts. Unlike oth...
Log4jCenter
Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote code execution and more. Blog post detailing exploitation linked below: How to exploit Log4j vulnerabilities in VMWare vCenter Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository...
CVE-2018-7600
CVE-2018-7600 - Drupal 7 Remote Code Execution A Rust implementation of the CVE-2018-7600 exploit targeting vulnerable Drupal 7 installations = 7.57. This CLI reproduces this following PoC flow: it poisons a cached renderable form via the user/password path, extracts a formbuildid, then triggers...
needrestart-sudo-escalate-cve-2024-4890
CVE-2024-4890: needrestart Sudo Privilege Escalation PoC Disclaimer For lab-only use in controlled environments. Do not exploit on production systems without explicit authorization. This PoC is for educational purposes only. The author is not responsible for any misuse or unauthorized access...
Craft-CMS-Exploit
Este script de Python explota la vulnerabilidad de ejecución remota de código CVE-2023-41892 de Craft CMS, un popular sistema de gestión de contenidos. Las versiones entre 4.0.0-RC1 y 4.4.14 se ven afectadas por esta vulnerabilidad, lo que permite a atacantes ejecutar código arbitrario de forma...
CVE-2022-24086-RCE-PoC
CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...
CVE-2025-48148
CVE-2025-48148 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload 🚀 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload Exploit 📝 Description The StoreKeeper for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to...
Cobaltstrike-RCE-CVE-2022-39197
Cobaltstrike RCE Vulnerability CVE-2022-39197 Reproduction Vulnerability Brief This vulnerability exists in the Cobalt Strike Beacon software and may allow an attacker to set a malformed username in the Beacon configuration, triggering XSS, which can lead to remote code execution on the Cobalt...
Log4jUnifi
Log4jUnifi Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more. Another Log4j on the fire: Unifi Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository automates the exploitation process. See the blog po...
CVE-2019-16941
CVE-2019-16941 Proof-of-Concept: The vulnerability requires multiple and relatively improbable conditions in order to get triggered, fact that limits its exploitability. However, it takes little effort and understanding to prepare a payload given the fact that it can result into an arbitrary code...
Jenkins_CVE-2019-1003000
JenkinsScript-SecurityPipeline Plugin Remote Code Execution VulnerabilityCVE-2019-1003000 pocsuite Version...
GeoServer-CVE-2024-36401
GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Vulnerabilidad de ejecución remota de código RCE en la evaluación de expresiones de nombres de propiedades GetPropertyValue root@kitploit: POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows...
EUVD-2026-65525
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers incomplete fix of CVE-2026-12841...
Ivanti-CVE-2025-0282
Ivanti-CVE-2025-0282 Ivanti Remote code execution Thanks @Abdualhadi khalifa...
CVE-2023-46604
Resumen Técnico del Ataque: CVE-2023-46604 El script explota una vulnerabilidad de deserialización insegura en Apache ActiveMQ CVE-2023-46604 para lograr la ejecución remota de código en el servidor objetivo. Descripción del Proceso de Explotación root@kitploit: Objetivo de la Vulnerabilidad: La...