evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

Apache APISIX - Remote Code Execution

A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. When the admin key was changed or the port of Admin API was changed to a port different...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

NoSQLMap

NoSQLMap NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases and web applications using NoSQL in order to disclose or clone data from the database. Originally authored by @tcsstool and n...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability Installation Instruction: Download using git Requires git: git clone https://github.com/7heKnight/CVE-2020-0688 Download Zip File: https://github.com/7heKnight/CVE-2020-0688/archive/refs/heads/main.z...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...

CVE-2019-0232

CVE-2019-0232 एक्सप्लॉइट CGI सर्वलेट में रिमोट कोड निष्पादन RCE – विंडोज़ पर Apache Tomcat संदर्भ : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ root@kitploit: Apache Tomcat में CGI सर्वलेट में एक कमजोरी है...

CVE-2020-2551

CVE-2020-2551 IIOP के साथ Weblogic RCE 0x01 डिफ़ॉल्ट रूप से IIOP सक्षम 0x02 PoC डेमो...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

CVE-2023-45612-PoC

CVE-2023-45612 PoC This repository contains a proof of concept PoC for CVE-2023-45612 which allowed XXE in the default configuration of ContentNegotiation in ktor. The PoC is split into 2 parts: server/, containing an example of a Ktor server using an affected version of Ktor, with an endpoint...

fastjson-cve

Projet de Reproduction de CVE-2026-16723 Aperçu Ce projet reproduit CVE-2026-16723 — une vulnérabilité critique d'exécution de code à distance RCE dans fastjson 1.2.68 à 1.2.83. La vulnérabilité permet une RCE avec la configuration par défaut , sans nécessiter l'activation d'AutoType ni de gadget...

SCAT

SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...

Apache-Solr-Arbitrary-File-Read

Apache Solr Arbitrary File Read Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and client libraries for many programming languages such...

CVE-2026-84736

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLSCERTIFICATEVALIDATION environment variable is unset or set to false, the...

SUSE CVE-2026-55857

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

Hadoop-YARN-RCE

Apache Hadoop YARN ResourceManager में बिना प्रमाणीकरण के RCE Apache Hadoop YARN ResourceManager में एक अनधिकृत पहुँच भेद्यता मौजूद है जब इसकी REST API डिफ़ॉल्ट पोर्ट 8088 या RPC पोर्ट प्रमाणीकरण सक्षम किए बिना उजागर होते हैं। डिफ़ॉल्ट रूप से, Hadoop HTTP वेब कंसोल और RPC सेवाओं को असुरक्षित छोड़...

hekate

Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...

exploit-CVE-2026-23744

exploit-CVE-2026-23744 MCPJam Inspector is a local-first development platform for MCP servers. In versions 1.4.2 and earlier, a RCE flaw lets attackers send crafted HTTP request that installs an MCP server and runs code remotely, because the service listens on 0.0.0.0 instead of 127.0.0.1 by...

CVE-2026-63563

CVE-2026-63563 - Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers Vendor advisory: Sharp Product Security Advisory 2026-004 published July 31, 2026 Summary Sharp MX/BP series multifunction printers expose the address book through the device web interface without...

CVE_2021_27850_POC

कमांड उपयोग root@kitploit: git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command 假设 hmac key为 change this...