PaloAlto Networks Expedition - Remote Code Execution

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. id: CVE-2024-946...

NUUO NVRmini - Remote Command Execution

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. id: CVE-2018-14933 info: name: NUUO NVRmini - Remote Command Execution author:...

Mida eFramework <=2.9.0 - Remote Command Execution

Mida eFramework through 2.9.0 allows an attacker to achieve remote code execution with administrative root privileges. No authentication is required. id: CVE-2020-15920 info: name: Mida eFramework =2.9.0 - Remote Command Execution author: dwisiswant0 severity: critical description: Mida eFramewor...

xll_windows_reverse_shell

xllwindowsreverseshell xll विंडोज रिवर्स शेल अपने हमलावर Kali मशीन में: root@kitploit: git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. revsh.ps1 को अपडेट करें 2. python HTTP सर्वर बनाएं root@kitploit: python3 -m http.server 9999 अपने हमलावर Windows मशीन में: 1. notpadXLL.c को...

smartermail-CVE-2026-23760-poc

SmarterMail-CVE-2026-23760-poc Uma prova de conceito que explora uma bypass de autenticação via API de redefinição de senha para a conta de administrador do sistema SmarterMail. Vulnerabilidade A vulnerabilidade existe devido a uma falha de bypass de autenticação na API de redefinição de senha. O...

cli v1.1307.0

Getting started with the Snyk CLI Introduction to the Snyk CLI Snyk is a developer-first, cloud-native security tool to scan and monitor your software development projects for security vulnerabilities. Snyk scans multiple content types for security issues: Snyk Open Source: Find and automatically...

ufuzz

UFuzz, oder Universal Plug and Fuzz, ist ein automatisches UPnP-Fuzzing-Tool. Es listet alle UPnP-Endpunkte im Netzwerk auf, findet die verfügbaren Dienste und fuzzt diese. Es besitzt außerdem die Fähigkeit, HTTP mithilfe von Burp-Proxy-Logs zu fuzzen. Es ist dafür ausgelegt, eingebettete Systeme...

CVE-2022-25064

CVE-2022-25064 TP-LINK TL-WR840N RCE über die Funktion oalwan6setIpAddr POC root@kitploit: POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3...

CVE-2021-42237

CVE-2021-42237 Dies ist ein Exploit/PoC für CVE-2021-42237, entnommen aus: Diesem Assetnote-Bericht HAFTUNGSAUSSCHLUSS: Ich bin in keiner Weise mit Assetnote verbunden. Dieser Inhalt wird nur zu Bildungszwecken bereitgestellt. Stelle sicher, dass du CMD-COMMAND-HERE sowie den Host im folgenden Po...

cdncheck v1.2.50

cdncheck Features • Installation • Usage • Join Discord root@kitploit: cdncheck is a tool for identifying the technology associated with dns / ip network addresses. Features CDN , CLOUD and WAF Detection Easy to use as library Easily extendable providers IP, DNS input support Text, JSONL output...

CVE-2026-2256-PoC

CVE-2026–2256 PoC Zusammenfassung Eine kritische Command-Injection-Schwachstelle CVE-2026–2256, CVSS X.X wurde in der Shell-Tool-Komponente des MS-Agent-Frameworks Version 1.5.2 identifiziert. Die Schwachstelle entsteht durch unzureichende Bereinigung von benutzerbeeinflussten Eingaben, die direk...

CVE-2026-4112

SonicWall SMA 8200v: Privilege Escalation durch Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix auf 12.5.0-02002 Basis SonicWall Advisory 1. Zusammenfassung Eine Blind-SQL-Injection-Schwachstelle nach der Authentifizierung in der Verwaltungskonsole der SonicWall SMA...

webpwn3r

webpwn3r Questo progetto non è mantenuto da anni ed è stato scritto quando stavo imparando Python, ma ancora oggi piace alla gente :D. Supporta solo python2.7 WebPwn3r - Scanner di sicurezza per applicazioni web. Di Ebrahim Hegazy - @Zigoo0 Ringraziamenti: @lnxg33k, @dia2diab @Aelhemily, @okamalo...

webpwn3r

webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...

cottage v0.7.0

cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...

Exploit for Improper Access Control in Oracle Http_Server

CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Pl...

Pwnkit-go

PwnKit-go-LPE CVE-2021-4034 Un exploit basato su golang per CVE-2021-4034 soprannominato pwnkit root@kitploit: @@@@@@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@ @@@ @@@ @@@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@@ @@@@@@@@ @@! @@@ @@! @@! @@! @@!@!@@@ @@! !@@ @@! @@! !@@ @@!...

Umbraco-RCE

Umbraco RCE-Exploit / PoC Umbraco CMS 7.12.4 - authentifizierte Remote-Codeausführung EDB-49488 PacketStorm WLB-2020080012 Verwendung root@kitploit: $ python exploit.py -h usage: exploit.py -h -u USER -p PASS -i URL -c CMD -a ARGS Umbraco authenticated RCE optional arguments: -h, --help show this...

ysoserial-modified

ysoserial-modified Questa è una fork dell'applicazione ysoserial originale che puoi trovare qui: https://github.com/frohoff/ysoserial Descrizione della Modifica A causa di come Runtime.getRuntime.execString.class funziona in Java, i comandi complessi e annidati in cui devi controllare le pipe o...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 Exploit Dieses Tool nutzt eine Schwachstelle CVE-2023-38646 in einer Softwareplattform aus. Der Exploit ermöglicht die Remote-Codeausführung über eine manipulierte Anfrage, indem eine fehlerhaft verarbeitete Datenbank-Verbindungszeichenfolge ausgenutz...