snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco is a snmp scanner that can be used both for internal testing and external testing to assess Cisco Nexus switches 5000 and 6000 family. There are many snmp scanners and brute forcers this was made for just completeness.It has the...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...

CVE-2021-41078

CVE-2021-41078 nameko Arbitrary code execution due to YAML deserialization NVD Description Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file. Demo Set Up 1. Build an image from a Dockerfile root@kitploit: docker build -t cve-2021-4107...

CVE-2026-33032

CVE-2026-33032 Safe check reads nginx status root@kitploit: python3 main.py http://target:9000 --tool nginxstatus List configs root@kitploit: python3 main.py 10.0.0.50 --tool nginxconfiglist Destructive demo writes + reloads root@kitploit: python3 main.py http://target:9000 \ --tool nginxconfigad...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted Git service similar to a private version of GitHub, designed to run easily on low-resource servers. The CVE-2025-8110 vulnerability is a critical security flaw that allows an attacker to bypass path restrictions by using symlinks. By...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions. Run exploit root@kitploit: USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com Run nuclei template root@kitploit: echo https://target.com | nuclei...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

CVE-2023-51385-

RCE via insecure /.ssh/config Use of tokens like %h, %p in is quite popular to use tunnels and connection proxying using SSH.ProxyCommand Vulnerable config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Note: in my initial assessment I was under the impression that...

TrickBot-Toolkit

TrickBot A collection of tools for working with TrickBot ConfigDecrypter.py Used to decrypt TrickBot configs found in install directory under then name config.conf Example usage: ConfigDecrypter.py -input config.conf -output config.txt FileDownloader.py Used to download files from command and...

CVE-2023-27524

CVE-2023-27524 Apache Superset Auth Bypass CVE-2023-27524 Reference https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524 https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/...

joomla_CVE-2023-23752

joomlaCVE-2023-23752 Joomla - a request parameter breaks through the Rest API Affected version ​ Joomla roughly has three routing entries, which are index.php in the root directory users access articles administrator/index.php in the root directory administrator management api/index.php in the ro...

CVE-2023-27524

CVE-2023-27524 Description - POC for CVE-2023-27524: Apache Superset Auth Bypass Vulnerability. - create by antx at 2023-04-27. Detail - Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRETKEY...

libmsm_cameraconfig_exploit

Original code is written by @tewilove http://pastebin.com/8BPCDc4i...

Cisco-Smart-Exploit

Cisco-Smart-Exploit Cisco SmartInstall Exploit CVE-2018-0171 Inspired from C. Papathanasiou PoC This Python 3 script uses port 4786 on a Cisco device running SmartInstall to exploit CVE-2018-0171. With the use of this exploit, an attacker can craft a payload, send it to the Cisco device, and then...

CVE-2026-12264

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

CVE-2026-12264 Authenticated File Write via HA Failover Config Upload leads to RCE

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

EUVD-2026-88226

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

CVE-2026-12264

Zohocorp ManageEngine DDI Central versions prior to 6201 are vulnerable to an Arbitrary file write flaw. This vulnerability occurs during the HA Failover Config sync upload process, which can be leveraged by an authenticated user to achieve remote code execution (RCE) . No specific exploit detail...

Config-Exploiter

Config-Exploiter Config-Exploiter : extrae archivos config.php de sitios web Joomla y Wordpress. Programado por Belahsan Ouerghi. Instalación root@kitploit: sudo apt-get install git git clone https://github.com/TunisianEagles/Config-Exploiter.git cd Config-Exploiter chmod +x install.sh sudo...

EUVD-2026-88217

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...