Superset_auth_bypass_check

Supersetauthbypasscheck Apahce-Superset身份认证绕过漏洞CVE-2023-27524检测工具 修复时间：2023.8.3 修复由于硬编码session时间过期导致的session失效，引用flasksessioncookiemanager工具生成实时session进行检测。 修复由于未禁用重定向导致跳转/login/匹配状态码为200的bug 感谢nplookges师傅的反馈 开发环境： python3 避免python环境命名导致运行失败，可将python运行程序改为python3添加到环境变量中 root@kitploit:...

CVE-2019-15107-Exploit

CVE-2019-15107 Python Exploit This exploit is for CVE-2019-15107 Webmin 1.890-1.920 unauthenticated RCE implemented in Python. Usage root@kitploit: python3 webminExploit.py python3 webminExploit.py 10.200.198.200 10000 whoami python3 webminExploit.py 10.200.198.200 10000 "curl -h"...

wpUsersScan

wpUsersScan Acerca de wpUsersScan Enumera la lista de usuarios de los sitios web de WordPress a través de la API REST / CVE-2017-5487, WordPress 4.7.1 - Enumeración de nombres de usuario Uso root@kitploit: $ python wpUsersScan.py URL Cómo instalar Clonar Clona el repositorio con: root@kitploit: $...

CVE-2026-82187

creationtimestamp| type| source ---|---|--- 2026-09-21 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvzdxn3kxj2y 2026-09-21 14:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvzxisfbir2n...

CVE-2018-7602

This repository does not have a README...

CVE-2022-40684

Descripción Exploit para la vulnerabilidad de omisión de autenticación CVE-2022-40684 que afecta a los dispositivos FortiOS, FortiProxy y FortiSwitchManager. Descargo de responsabilidad Esta herramienta está destinada únicamente con fines de demostración, úsela solo contra sistemas donde tenga...

external_libexif_AOSP10_CVE-2020-0452

libexif ------- DESCRIPTION libexif is a library for parsing, editing, and saving EXIF data. It is intended to replace lots of redundant implementations in command-line utilities and programs with GUIs. FEATURES libexif supports parsing, editing and saving of EXIF data. In addition, it has gettex...

CVE-2025-67038

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-66038 vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg...

CVE-2025-24813_presentation

This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. T...

react2shell-test-server

Servidor de Pruebas React2Shell Un servidor de prueba para demostrar y probar la vulnerabilidad React2Shell CVE-2025-55182 Descripción Hemos estado investigando el RCE de React2Shell CVE-2025-55182 desde que se publicó, y trabajamos para prevenir esta vulnerabilidad con nuestros clientes...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

CVE-2025-65856

This repository does not have a README...

vaas-cve-2014-0160

漏洞即服务 - CVE 2014-0160 一个基于 Debian Wheezy Linux 的系统，包含易受攻击版本的 libssl 和 openssl，以及一个用于展示 CVE-2014-0160（即 Heartbleed）的 Web 服务器。 概述 此 Docker 容器基于 Debian Jessie，并已修改以使用易受攻击版本的 libssl 和 openssl。 一个简单的静态网页通过 Apache 2 提供服务。 用法 使用 docker pull hmlio/vaas-cve-2014-0160 安装容器 使用端口映射运行容器：docker run -d -p...

CVE-2021-41277

CVE-2021-41277 MetaBase Arbitrary File Read Vulnerability fofa Batch POC Disclaimer This POC is only used to detect whether the target has the vulnerability. It is strictly forbidden to be used in any unauthorized testing. The author assumes no responsibility. Usage Fill in the email and key of a...

CVE-2022-26134-OGNL-Injection

This repository does not have a README...

CVE-2008-1930

CVE-2008-1930 Exploitation Documentation Guide Document Information Purpose: Educational and authorized security assessment documentation Vulnerability: CVE-2008-1930 Audience: Security Analysts, Penetration Testers, Students Environment: Controlled and Authorized Testing Lab Table of Contents 1...

POC-CVE-2025-31931

Writeup Read it here: https://tinyhack.com/2025/11/09/cve-2025-31931-arbitrary-shared-library-loading-in-intel-itt-api-on-android-affects-opencv-4-10/...

CVE-2026-18366

CVE-2026-18366 — Events Manager 7.4.1: Unauthenticated Privilege Escalation to Administrator | ---|--- Product| Events Manager WordPress plugin Affected versions| 7.1.0 – 7.4.0.x Fixed version| 7.4.1 Weakness| CWE-269: Improper Privilege Management Severity| CVSS 3.1: 9.8 Critical —...

Watchguard-RCE-POC-CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 PoC for Watchguard CVE-2022-26318 updated to work with Python3.12 as the ssl.wrapsocket is deprecated. PoC originally from https://github.com/h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318/blob/main/POCwg.py...