1304058 matches found
CVE-2022-2588
CVE-2022-2588...
CVE-2022-30190
CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will literally not run i...
nextjs-middleware-exploit
Next.js 中间件漏洞研究 CVE-2025-29927 此仓库演示了 Next.js 中间件中的一个严重 漏洞 （CVE-2025-29927），影响版本为 11.1.4 至 15.1.7。该漏洞允许通过缓存投毒实现 授权绕过 、CSP 绕过 以及潜在的 DoS 攻击 。问题源于 x-middleware-subrequest 请求头的处理方式，使得攻击者能够绕过中间件保护机制。 此概念验证专门针对 v12 中的漏洞。 使用方法 环境搭建 使用 docker 和本仓库中的文件来搭建易受攻击的环境，运行以下命令： root@kitploit: git clone...
revisaxzutils
revisaxzutils Bash script to check if you have the CVE-2024-3094 vulnerability. Installation Quick installation for Ubuntu, Kali Linux, Parrot root@kitploit: git clone https://github.com/hackingetico21/revisaxzutils.git cd revisaxzutils chmod +x ./revisaxzutils.sh...
PoC_iOS12
PoCiOS12 PoC Exploit iOS 12 to iOS 12.1 CVE-2018-4431 Kernel is available for: iPhone 5s and later, iPad Air and later and iPod Touch 6th generation...
CVE-2022-0847-DirtyPipe-Exploit
CVE-2022-0847-DirtyPipe Vulnerability Overview On March 7, foreign security researcher Max Kellermann published a blog disclosing a local privilege escalation vulnerability CVE-2022-0847 in the Linux kernel: https://dirtypipe.cm4all.com/ CVE-2022-0847 is a local privilege escalation vulnerability...
httpd-2.4.49
httpd-2.4.49 critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 CVE-2021-42013...
CVE-2019-10945
CVE-2019-10945 This is a Python 3 port of the original exploit from Haboob Team: https://www.exploit-db.com/exploits/46710...
spring-webmvc5
spring-webmvc5 Fork of spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819 Maven Add the following to the dependencies section of your project's pom.xml: root@kitploit: io.github.jaloon spring-webmvc5 5.3.39.1...
CVE-2017-7529
This repository does not have a README...
CVE-2025-24813-PoC-Apache-Tomcat-RCE
Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...
Guide-and-theoretical-code-for-CVE-2023-35674
Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...
snakeyaml_cve_poc
snakeyamlcvepoc SnakeYAML-CVE-2022-1471-POC build Either build the jar on your host with mvn clean compile assembly:single Or use docker to build an image with docker build -t snakeyaml . run Run the container with docker run --rm -p8080:8080 snakeyaml or the jar if you built on your host with ja...
CorruptQueryAccessWorkaround
CorruptQueryAccessWorkaround: Query '' is corrupt The latest workaround for the Query is corrupt error introduced with CVE-2019-1402 in MS Access. There are other workarounds out there that need to be applied on an administrative level, e.g. by uninstalling the erroneous update. In contrast to...
Apache-RocketMQ-RCE-CVE-2023-37582-poc
This repository does not have a README...
hardware_nxp_nfc_AOSP10_r33_CVE-2020-0155
This repository does not have a README...
CVE-2021-41773
CVE-2021-41773 scanner This script tests for the path traversal and local file inclusion vulnerability in Apache version 2.4.29, this script doesn't return local files, it merely scans the web server and tells you if it's vulnerable or not. Usage: python3 cve-2021-41773-scanner.py IPv4 address...
cve-2014-7920-7921
cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...