pylane

pylane 简体中文 Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run some code in its python vm. Usage use inject command to inject a python script in an process: root@kitploit: pylane inject use shell command to inject an...

SafeLine

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

PageTableInjection

PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...

SSTImap

SSTImap This project is based on Tplmap. SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive...

EUVD-2026-77071

A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpdate. This manipulation of the argument url causes code injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-90581

nginxWebUI (by cym1102, versions up to 4.4.2 ) is vulnerable to code injection in the MainController.autoUpdate function located at /adminPage/main/autoUpdate. The root cause is manipulation of the url argument, allowing a remote attacker with low privileges (no user interaction required) to exec...

CVE-2024-0507_CVE-2024-0200-github

简介 此仓库包含我们为GitHub Enterprise漏洞CVE-2024-0507和CVE-2024-0200开发的利用程序。 查看完整文章：https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/ CVE-2024-0507 GitHub Enterprise Server 管理控制台中的代码注入导致权限提升 . CVE-2024-0200 GitHub Enterprise Server 中的不安全反射导致命令注入...

CVE-2024-25180

CVE-2024-25180 概述 pdfmake是一个纯 JavaScript 客户端/服务器端 PDF 打印 此软件包的受影响版本容易受到任意代码注入攻击，攻击者可以通过向路径发送精心设计的 POST 请求来执行任意代码/pdf。攻击者可以通过发送精心设计的请求在系统上执行任意代码。 CVE-2024-25180 Remote Code Execution in pdfmake 脚本利用 root@kitploit: python3 CVE-2024-25180.py python3 CVE-2024-25180.py 192.168.140.42 1234 192.168.45.2...

CVE-2022-22947_EXP

一、Spring Cloud Gateway远程代码执行漏洞 危害等级：高危 POC/EXP情况：已公开 CNVD编号：CNNVD-2022-16402 ​ CVE编号：CVE-2022-22947 二、影响范围： VMWare Spring Cloud GateWay 3.1.0 VMWare Spring Cloud GateWay =3.0.0，python cve-2022-22947.py 验证单个目标： 1、python cve-2022-22947.py 进入交互模式后，根据提示输入目标url和需要执行的命令，注意命令的正确性 2、python...

CVE-2025-59536

CVE-2025-59536 - la implementación del diálogo de confianza de inicio. Vulnerabilidad de Claude Gravedad: ALTA CVSS: 8.8 Impacto: Confidencialidad, Integridad, Disponibilidad Publicado: 2025-10-03 Legal Solo para pruebas de seguridad autorizadas. Causa raíz versión corta Claude Code es una...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 代码生成控制不当（'代码注入'）严重漏洞 2024 摘要 CVE-2024-0195 是 spider-flow 0.4.3 Web 应用程序中的严重代码注入漏洞，具体存在于 FunctionController.java 文件中的 FunctionService.saveFunction 函数。攻击者可以远程注入恶意代码并在服务器上执行，从而导致应用程序完全沦陷。 影响.. 该漏洞极为严重，因为它允许在托管易受攻击的 spider-flow...

concealed_code_execution

隐蔽代码执行 Hunt& Hackett 提供了一系列工具和技术性文章，描述了在 Windows 上依靠隐蔽代码执行的攻击技术。你将在这里找到这些技术的工作原理解释、检测建议以及用于测试检测覆盖范围的示例源代码。 内容 本仓库涵盖了两类大量使用 Windows 内部机制的攻击技术，并提供了检测它们的建议和工具： 进程篡改 ——一系列在进程范围上隐蔽代码的技术。 代码注入 ——一系列允许在其他进程中执行代码而不干扰其功能的技巧。 检测 ——针对各种隐蔽代码执行技术的防御建议汇编。 本项目的核心价值： 系统化方法...

concealed_code_execution

Concealed Code Execution Hunt& Hackett presents a set of tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows. Here you will find explanations of how these techniques work, receive advice on detection, and get sample source code for testi...

MetInfo CMS <= 8.1 - Remote Code Execution

MetInfo CMS 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability caused by insufficient input neutralization in the execution path, letting remote attackers execute arbitrary code remotely, exploit requires crafted requests. id: CVE-2026-29014 info: name: MetInfo CMS = 8....

Netsweeper 4.0.3 - Cross-Site Scripting

A cross-site scripting vulnerability in webadmin/policy/grouptableajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. id: CVE-2014-9608 info: name: Netsweeper 4.0.3 - Cross-Site Scriptin...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Microweber <1.3.2 - Cross-Site Scripting

Code Injection in on search.php?keywords= GitHub repository microweber/microweber prior to 1.3.2. id: CVE-2022-3242 info: name: Microweber 1.3.2 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | Code Injection in on search.php?keywords= GitHub repository microweber/microweber...

ISPConfig - PHP Code Injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...

MediaWiki EasyTimeline - Code Injection RCE

MediaWiki EasyTimeline Timeline extension versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9 contain a code injection vulnerability caused by insufficient neutralization of newlines in TextData text attributes in EasyTimeline.pl / Timeline.php. A crafted block can inject ploticus 'proc getdata' a...

TP-Link Archer A20 v3 Router - Cross-site Scripting

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...