Exploit-For-CVE-2022-36067

Exploit-For-CVE-2022-36067 This repo contains payload for the CVE-2022-36067 How to exploit? Paste the payload given in payload.js along with the command you want to run. Test on local machine. To test on local machine, git clone the repo, install the dependecies and run app.js using node. If the...

CVE-2023-42819

CVE-2023-42819 CVE-2023-42819 Vulnerability Description JumpServer Arbitrary File Write Vulnerability CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. Place the script and required files in the same directory 2. Ensure Google Chrome is installed, and obtain its version number root@kitploit: re...

CVE-2021-41773

Vulnerable docker images for CVE-2021-41773 Apache path traversal This vulnerabiltiy only applies to version 2.4.49 that have specific non-default configs. In certain situations this can result in either file read or code execution. https://twitter.com/ptswarm/status/1445376079548624899 Vulnerabl...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...

CVE-2023-20887

CVE-2023-20887 Exploit VMWare vRealize Network Insight Pre-Authenticated RCE CVE-2023-20887 Usage root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l...

unomi_exploit

Disclaimer The vulnerability detection methods, files, and other content provided here are strictly limited to use by security professionals under legal authorization, for the purpose of testing the security of authorized servers. Security professionals must comply with legal regulations and are...

rschunter

RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

CVE-2020-13945-EXPLOIT

CVE-2020-13945 - Apache APISIX 远程代码执行 RCE 该仓库包含针对 Apache APISIX 中一个漏洞的概念验证 PoC 利用代码。该漏洞在启用 Admin API 并且删除访问 IP 限制规则时出现，从而允许使用默认令牌访问 APISIX 管理数据。此漏洞影响版本 1.2、1.3、1.4 和 1.5。 目录 概述 受影响版本 设置 使用方法 缓解措施 免责声明 概述 Apache APISIX 是一个动态、实时、高性能的 API 网关。在版本 1.2 至 1.5 中存在一个严重安全漏洞：当启用 Admin API 并删除 Admin API 访问 I...

CVE-2024-7627-PoC

CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...

metasploitable2-vsftpd-writeup

Metasploitable2 — vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux ↔ Metasploitable2 environment. Objective Practice the core penetration testing workflow — reconnaissance,...

CraftCMS_CVE-2023-41892

Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage root@kitploit: python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : root@kitploit: python3 -m pip install requests...

CVE-2020-10673

CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : NetLinkルーター向けの認証済みリモートコード実行エクスプロイト（boaサーバー使用） CVSSスコア: 7.2 脆弱性タイプ: OSコマンドインジェクション 認証: 必須 影響を受けるモデル: HG323 説明 Netlinkルーターの/boaform/admin/formPingリソースは、リモート攻撃者がtargetaddrパラメータを介してOSコマンドインジェクションを実行することを可能にします。 使用方法 root@kitploit: usage: CVE-2020-8958.py -h -i URL -u USE...

CVE-2022-28171-POC

CVE-2022-28171-POC I originally published this on ExploitDB, which you can find at https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution root@kitploit: Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exploit 🚨 Introduction 📖 This repository contains a Proof-of-Concept PoC exploit for a critical vulnerability in NextGen Healthcare Mirth Connect versions prior to 4.4.1. The vulnerability, tracked as CVE-2023-43208, allows for...

CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE

RaspAP Hunter RaspAP Hunter is a Bash script designed to scan for RaspAP installations and test them for a specific vulnerability CVE-2022-39986. root@kitploit: / \ / | / \ / // // // // \ / /| | / // / / , // // / / // // | / / // || ,//// ./// ||// // author: mind2hex / / / / / / / // // / / //...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

CVE-2022-22909

CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...