CVE-2019-8451

CVE-2019-8451 Vulnerabilidad SSRF no autorizada en Jira Uso con python python CVE-2019-8451.py http://www.jas502n.com:8080 root@kitploit: root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...

CVE-2024-28000-Exploit-Lab

CVE-2024-28000 — Laboratorio LiteSpeed Cache de WordPress Reproducción autorizada en laboratorio local de CVE-2024-28000 , un problema de escalada de privilegios no autenticada que afecta a versiones vulnerables del plugin LiteSpeed Cache de WordPress. Alcance: Este repositorio documenta pruebas...

ai-code-review

🔍 codereview AI-powered code review in your terminal. One command. Instant feedback. Catches security vulnerabilities, bugs, and bad patterns before they hit production. Install · Quick Start · Usage · Providers · Contributing What It Does codereview sends your code to an LLM and returns a...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

prefetch-hash-cracker

预取哈希破解器 动机 在对 Windows 机器进行取证分析时，你可能会找到已删除的预取文件的名称。虽然其内容可能无法恢复，但文件名本身通常足以找到创建该预取文件的可执行文件的完整路径。 使用该工具 必须提供以下字段： 可执行文件名称 包括扩展名。该名称将嵌入预取文件名中，除非出现以下情况。 预取哈希 预取文件名末尾的 8 位十六进制数字，紧接在 .pf 扩展名之前。 哈希函数 Bodyfile 挂载点 哈希函数 已知有 3 种预取哈希函数： SCCA XP 用于 Windows XP SCCA Vista 用于 Windows Vista 和 Windows 10 SCCA 2008 ...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi bypass de parche Solo para uso en entornos controlados y propios. No usar contra sistemas sin autorización. Descripción PoC desarrollada para demostrar CVE-2021-42013 , presente en Apache HTTP Server 2.4.50. Este CVE es el bypass del parche qu...

volana

volana 马达加斯加语中的月亮 root@kitploit: 使用它 ; 🌚隐藏于; 🌞可被检测到 Shell 命令混淆，以避免 SIEM/检测系统 在渗透测试中，一个重要方面是保持隐秘 。因此，你应该在行动后清除痕迹 。然而，许多基础设施会实时记录命令并发送到 SIEM，这使得事后清理工作变得毫无意义。 volana 提供了一种简单的方法来隐藏在被攻陷机器上执行的命令：它提供了一个自己的 shell 运行环境（输入你的命令，volana 为你执行）。这样你可以在行动过程中清除痕迹 。 使用方法 你需要获取一个交互式...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

btrfs_fixes

btrfsfixes: Custom BTRFS Repair Tools Custom tools written during recovery of a 12TB multi-device BTRFS pool with severe extent tree corruption that the native commands btrfs check --repair, --init-extent-tree, etc. could not repair. SeeINCIDENT-ANALYSIS.md for a structured case study of the...

CVE-2017-10271

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Writeup I. System Analysis System Log Analysis Detected Service: Oracle WebLogic Server AdminServer belonging to basedomain running in Development Mode. Connection Port: 7001. Supported Protocols: http, t3, iiop, ldap, snmp. Attack Surfa...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: AppleM2ScalerCSCDriver shared scheduler use-after-free Public technical disclosure for CVE-2026-43655 , an AppleM2ScalerCSCDriver / IOSurfaceAccelerator use-after-free reachable from the default iOS app sandbox with no special entitlements. Apple addressed this issue in iOS 26.5 /...

CVE-2025-51868

CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses httpclient5-5.6.2.jar, aiohttp-3.13.4-cp311-cp311-manylinux2014x8664.manylinux217x8664.manylinux228x8664.whl, ip-address-10.2.0.tgz, datasets-3.6.0-py3-none-any.whl, jackson-databind-2.21.4.jar, keras-3.13.2-py3-none-any.whl, log4j-api-2.24.3.jar,...

Ghostcat-Tomcat-AJP-Exploit-Py3

Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerability Detection Tool Introduction This project provides a Python verification script for verifying the Apache Tomcat AJP protocol local file inclusion vulnerability commonly known as Ghostcat, CVE-2020-1938 / CNVD-2020-10487. This script is ...

OpenNebula-CVE-2025-56534

OpenNebula-CVE-2025-56534 Título del Exploit : OpenNebula 6.10.0.1 - XSS Almacenado Cross-site Scripting en el controlador de autenticador personalizado Autor del Exploit : Mark Artamonov Página del Vendedor : https://opennebula.io/ Versión Probada : OpenNebula 6.10.0.1 Versiones Afectadas :...

CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Escalada Local de Privilegios en Linux Una demostración y explicación de CVE-2026-31431, la vulnerabilidad de escalada local de privilegios por Copy Fail en el kernel de Linux. La vulnerabilidad permite que, en archivos abiertos con permiso de lectura, se sobrescriban dato...

CVE-2023-43317

CVE-2023-43317 A normal user can elevate their privileges via the userPermissionsLIst parameter in Session Storage component. to gain unauthorized access to administrative-level resources and features. This could lead to unauthorized data access, data modification, and other actions that are...

CVE-2019-15715

CVE-2019-15715 The current repository is an implementation in Python3 of CVE-2019-15715 and aims to focus on the solely improvement of the CVE-2019-15715 previously reported here by Nikolas Geiselman by adding python's parameter implementation to make the script more flexible. root@kitploit:...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Simulación de explotación de Dahua Authentication Bypass PoC CVE-2021-33044 Resumen Las cámaras IP Dahua son dispositivos IoT ampliamente utilizados en sistemas de vigilancia de seguridad. Debido a que a menudo se despliegan en redes internas o se accede a ellas desde Internet, las vulnerabilidad...