Exploits

Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...

CheckPWD

Project Background During penetration testing, we often encounter various application software and network devices, which is especially prominent in intranet environments. When encountering such targets, our first reaction is usually to attempt login with default credentials. Based on this...

CVE-2026-97649

A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is an unknown functionality of the file examplelite.sql. Executing a manipulation can lead to use of default credentials. It is possible to launch the attac...

CVE-2026-97649 ningzichun student-management-system example_lite.sql default credentials

A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is an unknown functionality of the file examplelite.sql. Executing a manipulation can lead to use of default credentials. It is possible to launch the attac...

EUVD-2026-86498

A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is an unknown functionality of the file examplelite.sql. Executing a manipulation can lead to use of default credentials. It is possible to launch the attac...

CVE-2026-97649

A flaw exists in the ningzichun student-management-system (up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf ) involving an unknown functionality within the example_lite.sql file. An attacker can perform a remote manipulation to achieve the use of default credentials . While the exploit has b...

frevvomapexec

frevvomapexec frevvomapexec is a script to verify the existence of a blind SQL injection vulnerability by injecting a delay of your choosing in seconds in Square 9 GlobalForms 6.2. To verify the vulnerability is legitimate, the end user will be required to do math e.g. Subtracting the smaller...

CVE-2024-12856

CVE-2024-12856 This is an exploit for Four-Faith router models F3x24 and F3x36 to get a reverse shell. "The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to...

CVE-2021-32157

CVE-2021-32157 Make it possible to build a vulnerable webmin virtual environment as a container using docker Build If there is an error related to download, please comment on line 15 of dockerfile and run line 14 of dockerfile. root@kitploit: docker build -t VulnWebmin . docker run --name...

CVE-2021-43798

CVE-2021-43798 A batch verification script written in Golang, with 48 built-in verifications Too many people write it in Python, so I'm trying to learn Golang Usage Save the URL addresses as url.txt, then run go run CVE-2021-43798.go in the current directory. Vulnerable addresses will be saved to...

CVE-2026-0770

🚀 CVE-2026-0770 – Langflow RCE execglobal PoC Remote Code Execution vulnerability in Langflow 📌 Affected Software This vulnerability affects: Langflow 🧠 Vulnerability Overview CVE-2026-0770 is a Remote Code Execution RCE vulnerability in the: root@kitploit: /api/v1/validate/code endpoint. When...

netgear-telenetenable

telnetenable.py Paul Gebheim Translated from the C source available from http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole Running: python telnetenable.py IP - The IP of your Netgear device, usually 192.168.1.1 MAC - The mac address should be the MAC address of the LAN po...

Wordpress-Default-Password

Wordpress Default U/P python 2.7 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614 Encrypt By Azim !...

CVE-2026-20169

IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...

Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Search for vulnerable devices on Google with the keyword: intitle:"DVR login". 2. Try to access any device: We see the device requires a Username and Password to access. 3. Check if we can retrieve the...

CVE-2019-15813

CVE-2019-15813 This container was made to explain and demonstrate how CVE-2019-15813 Sentrifugo works Sentrifugo V3.2 Sentrifugo is a Human Resource Management System How to Install docker-compose up Default crentials to test ----Super Admin---- Username : empp0001 Password : 5faa7bdf3d7af...

Zena-CVE-2021-45026

Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC Process: Logs into Zena's webconfig page using default credentials Drops Stored XSS...

Magnohost-Vulnerabilities-pentest

MagnoHost 渗透测试 对 MagnoHost 托管提供商及 MeteorCloud 基础设施的渗透测试。发现：6 台服务器上 MariaDB 暴露（CVSS 9.8），OmniDialer 默认凭据导致完全访问，Wings CVE-2024-27102（9.9），Grafana 暴露，DMARC 欺骗。仅使用 curlcffi + Python。零自动化扫描器。 目标信息...

EUVD-2026-77484

novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal caches by supplying the hardcoded default value in the URL path. Attackers can trigger unauthorized cache invalidation ...

CVE-2026-90940: Use of Default Credentials

novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal caches by supplying the hardcoded default value in the URL path. Attackers can trigger unauthorized cache invalidation ...