nextjs-cve-2025-29927-poc

Next.js POC for CVE-2025-29927 Authorization Bypass in Next.js Middleware · CVE-2025-29927 · GitHub Advisory Database Next.js and the corrupt middleware: the authorizing artifact - zherowebsecurity- What is this? This vulnerability allow to bypass middleware logics. src/middleware.ts:...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...

BlackLotusDetection

BlackLotusDetection Created to help detect IOCs for CVE-2022-21894: The BlackLotus campaign https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign/ This creates an output txt file in the c:\temp folder...

log4j2-CVE-2021-44228

Sample Log4j2 vulnerable application CVE-2021-44228 Versions Affected: all versions from 2.0-beta9 to 2.14.1 This application is based on Spring Boot web application vulnerable to CVE-2021-44228 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it:...

CVE-2020-3766_APSB20-12

CVE-2020-3766APSB20-12 https://vulners.com/cve/CVE-2020-3766 https://helpx.adobe.com/security/products/integrityservice/apsb20-12.html...

cve-2021-44228

cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...

CVE-2024-31982

CVE-2024-31982 PoC and Bulk Scanner Overview POC for CVE-2024-31982: XWiki Platform Remote Code Execution 14.10.20. This POC is based on this security advisory . How to Use Single Target Scan To scan a single target endpoint: root@kitploit: python CVE-2024-31982.py -u target Bulk Target Scan To...

Shellbash-CVE-2014-6271

Shellshock Remote Command Injection CVE-2014-6271 中文版本Chinese version Build and run the vulnerable environment： root@kitploit: docker-compose build docker-compose up -d When you visit http://your-ip/ you should see two files: safe.cgi victim.cgi safe.cgi generated by the latest version of bash, a...

CVE-2021-22911

CVE-2021-22911 Modifed ver of the original exploit to save some times on password reseting for unprivileged user The script assumes that you can register the account or already know credentials of unprivileged users. Change the password to the valid password on line: 63,73,96. Original exploit:...

Remote-Integer-Overflow-Vulnerability

Nginx : Vulnerabilidad de Desbordamiento de Enteros Remoto Este repositorio contiene una vulnerabilidad de Nginx antigua pero aún existente llamada "Vulnerabilidad de Desbordamiento de Enteros Remoto CVE-2017-7529". La vulnerabilidad afecta a servidores Nginx antiguos 1.13. La excepción es Nginx...

4B5F5F4Bp

4B5F5F4Bp PoC for CVE-2017-0075...

CVE-2016-4117-Report

Vulnerability Report for CVE-2016-4117 CVE-2016-4117 CVSS Scores & Vulnerability Types...

CVE-2025-48384-test

Reproduce Command Line root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2022-1388

Old exploit I forgot to publish...

cve-2019-9978

CVE-2019-9978 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-9978 Image author: https://github.com/cved-sources/cve-2019-9978...

ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

Laravel_CVE-2021-3129_EXP

LaravelCVE-2021-3129EXP Exploit de referencia: https://github.com/SNCKER/CVE-2021-3129 Requisitos de versión Laravel Iginition == 2.5.1 Probado con la versión local del EXP en Laravel 8.4.2 Notas importantes Se debe colocar este EXP en el directorio de phpgcc, de lo contrario no se podrá invocar...

frameworks_base_AOSP_10_r33_CVE-2022-20338

This repository does not have a README...

cve-2019-13720

cve-2019-13720 CVE-2019-13720 Exploit Tools 05 Nov 2019: Release POC: https://www.youtube.com/watch?v=0HdRJImwYww 06 Nov 2019: Release Tool. [email protected]...