680192 matches found
CVE-2019-15120
CVE-2019-15120 Exploit para XSS a travΓ©s de BBCode en la extensiΓ³n Kunena anterior a 5.1.14 para Joomla! InformaciΓ³n DescripciΓ³n: En la extensiΓ³n Kunena anterior a 5.1.14 para Joomla!, es posible que cualquier usuario ejecute un ataque de XSS almacenado enviando un mensaje especial en cualquier...
Python-CVE-2020-25213
Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...
CVE-2024-41817-poc
ImageMagick Arbitrary Code Execution CVE-2024-41817 Proof of Concept exploit for ImageMagick versions = 9.4.0 Python packages: paramiko Installation root@kitploit: git clone https://github.com/Dxsk/CVE-2024-41817-poc/ cd CVE-2024-41817-poc pip install -r requirements.txt Usage Auto-detect...
Telerik_CVE-2019-18935
TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...
cve-2023-22515-exp
cve-2023-22515-exp Python exploit script for cve-2023-22515 Arguments: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST Specify the URL -U USERNAME, --username USERNAME Specify the username -PW PASSWORD, --password PASSWORD Specify the password -E EMAIL, --email EMAI...
CVE-2019-15107-RCE-WebMin
Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 β€ version β€ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerabilityβonly reports it. Prerequisites Git Python 3.7+ Docker & Dock...
-CVE-2017-9805-
InformaciΓ³n de vulnerabilidad Recursos: https://vulners.com/cve/CVE-2017-9805 ΒΏQuΓ© es esto? Un script de exploit en Python capaz de ejecutar comandos remotos en el shell de un sistema que aloja un Struts2 vulnerable a S2-052. Uso python s2-052.py --target 'http://192.168.0.233/orders/3' --command...
PoC-CVE-2000-0649
PoC-CVE-2000-0649 A small tool to create a PoC for CVE-2000-0649. Usage This script verifies if the server is vulnerable for CVE-2000-0649. Keep in mind to play with HTTP, HTTPS and different paths. In my experience, the disclosure is mostly happening when connecting over HTTP and using the defau...
JQShell
JQShell A weaponized version of CVE-2018-9206. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use this software for illegal purposes. This software is intended for educational use only. No...
CVE-2020-11651
CVE-2020-11651 Un script que explota SaltStack CVE-2020-11651 y CVE-2020-11652 para aΓ±adir nuevos usuarios a un master Salt vulnerable inyectando entradas en /etc/passwd y /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author:...
Windows10_Cumulative_Updates_PowerShell
Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...
CVE-2019-13051
Pi-Hole 4.3.2 Command Injection & PrivEsc CVE-2019-13051 Pi-Hole version 4.3.2 contains a patch to this vulnerability:https://github.com/pi-hole/AdminLTE/pull/974 A big thanks to the Pi-Hole dev team for their awesome project and for making it so easy to report this vulnerability! Executive Summa...
CVE-2018-2893
CVE-2018-2893 Vulnerability Verification Script Usage root@kitploit: python CVE-2018-2893.py 10.10.0.1 7001 Analysis Warning root@kitploit: https://www.anquanke.com/post/id/152164 Script Source root@kitploit: https://www.secfree.com/article-957.html...
CVE-2023-41425-WonderCMS-Authenticated-RCE
CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...
git_rce
CVE-2024-32002 PoC 1. You must set up the git's symbolic link option like: root@kitploit: git config --global core.symlinks true 2. Then exploit CVE-2024-32002 by the following command: root@kitploit: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Attack Scenario...
CVE-2021-34527
CVE-2021-1675 / CVE-2021-34527 Two mini Script to check if the PrintSpooler Serivce is running within the Forest. CVE-2021-1675: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675 CVE-2021-34527 aka PrintNightmare...
CVE-2025-33053-Proof-Of-Concept
CVE-2025-33053 Proof Of Concept This repository provides scripts to automatically deploy a WebDAV server on Ubuntu using Apache2 , and generate malicious.url shortcut files for use in phishing, red teaming, or lateral movement simulation. π Contents setupwebdav.sh β Bash script to configure Apach...
SimpleCTF-UpdatedExploit
CMS Made Simple = 2.2.10 SQL Injection Exploit Overview This Python script exploits an unauthenticated SQL injection vulnerability in CMS Made Simple = 2.2.10 CVE-2019-9053. The exploit extracts sensitive information such as the salt, username, email, and password of the administrator from the CM...
Metasploit-Exploits-CVE-2023-6710
CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710 with metasploit and our comprehensive Proof of Concept PoC. This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated...
CVE-2013-3900-Remediation-Script
root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...