CVE-2023-20887

CVE-2023-20887 एक्सप्लॉइट VMWare vRealize Network Insight प्रमाणीकरण-पूर्व RCE CVE-2023-20887 उपयोग root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -...

unomi_exploit

...

CVE-2026-18408

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

ripple20-digi-connect-exploit

استغلال Ripple20: Digi Connect ME 9210 المؤلفان: Moshe Kol, Shlomi Oberman يحتوي هذا المستودع على استغلال PoC لـ CVE-2020-11896، وهي ثغرة أمنية خطيرة من نوع تجاوز سعة المخزن المؤقت في الكومة heap-based buffer overflow في حزمة Track TCP/IP جزء من مجموعة ثغرات Ripple20. يحقق هذا الاستغلال تنفيذًا ع...

CVE-2020-13945-EXPLOIT

CVE-2020-13945 - Apache APISIX Remote Code Execution RCE This repository contains a proof-of-concept PoC exploit for a vulnerability in Apache APISIX. The vulnerability arises when the Admin API is enabled and the access IP restriction rules are deleted, allowing the default token to access APISI...

CVE-2024-7627-PoC

CVE-2024-7627-PoC पृष्ठभूमि यह प्रमाण-अवधारणा PoC स्क्रिप्ट WordPress प्लगइन Bit File Manager संस्करण 6.0 - 6.5.5 में रेस कंडीशन CVE-2024-7627 के माध्यम से बिना प्रमाणीकरण के दूरस्थ कोड निष्पादन कमजोरी के लिए है। जानकारी विवरण: WordPress के लिए Bit File Manager प्लगइन संस्करण 6.0 से 6.5.5 में...

CVE-2026-82700

A cross-site scripting (XSS) vulnerability exists in the Newsletter Subscription component of code-projects Online Shopping System 1.0 , specifically in the file /offersmail.php . Manipulation of the email argument allows a remote, unauthenticated attacker to inject script, resulting in low impac...

CraftCMS_CVE-2023-41892

Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage root@kitploit: python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : root@kitploit: python3 -m pip install requests...

metasploitable2-vsftpd-writeup

Metasploitable2 — استغلال الثغرة الخلفية في vsftpd 2.3.4 مختبر عملي يوضح اكتشاف واستغلال ثغرة خلفية معروفة في vsftpd 2.3.4، باستخدام بيئة معزولة من Kali Linux ↔ Metasploitable2. الهدف ممارسة سير العمل الأساسي لاختبار الاختراق — الاستطلاع، تحديد الثغرات، الاستغلال، والتحقق بعد الاستغلال — ضد جهاز...

CVE-2020-10673

CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...

CVE-2022-22909

CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...

CVE-2022-37042

CVE-2022-37042 उपयोग भेद्यता जानकारी देखें। root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible for...

CVE-2023-34468

CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code...

cve-2020-11060-poc

CVE-2020-11060 Этот скрипт представляет собой эксплойт на Python 3.x для CVE-2020-11060 в GLPI версий 0.85-9.4.5. Оригинальная реализация: 0xdreadnaught Рефакторинг на Python3: n3rada Оригинальный PoC в ExploitDB теперь устарел, так как использовал Python 2.x. Новая версия была отправлена, и ссыл...

CVE-2023-0264

PoC for CVE-2023-0264 Keycloak vulnerability that allows session hijacking during authorization code flow See https://github.com/advisories/GHSA-9g98-5mj6-f9mv Prerequisites Docker curl jq python3 or another tool to serve static files on HTTP Steps to reproduce 1. Start Keycloak container with...

CVE-2025-31324

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: No logs. No noise. Just signal. // ----- SIGNATURE----- Key: ssh-rsa AAAAB3...NullKey...KFA== Fingerprint:...

CVE-2021-41773

RCE exploit both for Apache 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013: IMHO only "special" setups will be vulnerable to this RCE. Same happens for the "arbitrary file read" exploits you have seen. Both CVEs are indeed almost the same path-traversal vulnerability 2nd one is the uncomplete fi...

CVE-2024-25641

CVE-2024-25641 RCE Cacti 1.2.26 के लिए यह रिपॉजिटरी Cacti 1.2.26 पर CVE-2024-25641 का शोषण करने की प्रक्रिया को स्वचालित करता है। जब कोई उपयोगकर्ता प्रमाणित होता है, तो "Package Import" सुविधा के माध्यम से शोषणीय एक मनमाना फ़ाइल लेखन भेद्यता, "Import Templates" अनुमति वाले प्रमाणित उपयोगकर्ताओं क...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...