1300344 matches found
vSphereyeeter
vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...
CVE-2019-15707
CVE-2019-15707 Exploit...
SMBGhost-LPE-Metasploit-Module
SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...
POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0
Database Ghost 🔥 Herramienta avanzada de explotación de inyección SQL en PostgreSQL 🚨 AVISO LEGAL SOLO PARA PRUEBAS DE SEGURIDAD AUTORIZADAS El uso no autorizado es ilegal. Utilícelo únicamente en sistemas de su propiedad o para los que tenga permiso explícito de realizar pruebas. ⚡ INICIO RÁPIDO...
CVE-2025-48384-main
PoC para CVE-2025-48384 Esto es un POC. No lo descargues en un entorno inseguro. Permitirá al atacante ejecutar código remoto en tu máquina Ver CVE-2025-48384 Para ejecutar: root@kitploit: git clone --recurse-submodules [email protected]:zr0n/CVE-2025-48384-main.git El payload ejecutado está...
React2Shell_Hunter
React2Shell Hunter AWS Organization-Wide Detection Toolkit for CVE-2025-55182 & CVE-2025-66478 ⚠️ IMPORTANT DISCLAIMER - PLEASE READ BEFORE USE This toolkit has NOT been tested in a production AWS environment. Due to infrastructure constraints, this project was developed and validated through code...
mediacodecoob
mediacodecoob Infoleak and PC control poc for CVE-2015-6620 24445127, I'll add after conference...
kernelpop
kernelpop kernelpop is a framework for performing automated kernel vulnerability enumeration and exploitation on the following operating systems: Linux Mac It is designed to be python version-agnostic, meaning that it should work with both python2 and python3 please let me know if you find that i...
CVE-2019-15642
CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root...
keycloak
Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...
exploitarium
https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...
rdpscan
rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...
rdpscan
rdpscan para la vulnerabilidad CVE-2019-0708 bluekeep Este es un escáner rápido y sencillo para la vulnerabilidad CVE-2019-0708 en Escritorio Remoto de Microsoft. En este momento, hay alrededor de 900.000 máquinas en Internet público vulnerables a esta vulnerabilidad, por lo que muchos esperan un...
cve
CVE PoC 几乎每个公开可用的 CVE 概念验证（PoC）。 当前最热门的 CVE...
cve-2018-1335
Ankara Yildirim Beyazit University Computer Engineering Department CENG 325 - Principles of Information Security And Privacy CENG201 OOP Project Group Members @canumay @aslihann @ezgigucuyener @mburakdonmez References NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 - Command Injection...
CVE-2016-4117-Report
Vulnerability Report for CVE-2016-4117 CVE-2016-4117 CVSS Scores & Vulnerability Types...
CVE-2021-41773.git1
CVE-2021-41773 Fast python tool to test apache path traversal CVE-2021-41773 in a List of url Usage :- create a live urls file and use the flag "-l" python3 apachepathtraversal.py -l urls-list.txt...
WebPort-v1.19.1-Reflected-XSS
WebPort-v1.19.1-Reflected-XSS Reflected XSS in WebPort-v1.19.1 impacts users who open a maliciously crafted link or third-party web page. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 To exploit vulnerability, someone could use 'http://server:8090/access/setup?type=" request to impa...
CVE-2022-1329-WordPress-Elementor-RCE
CVE-2022-1329-WordPress-Elementor-RCE This poc is based on the one of AkuCyberSec. 中文版本 Usage Use docker-compose to start the vuln environment: root@kitploit: docker-compose up -d Then you can access the WordPress Admin page with URL http://localhost:8000. Register the admin user, and add a...