ATutor-Instructor-Backup-Arbitrary-File

ATutor-Instructor-Backup-Exploit Exploit Title: ATutor 2.2.4 'Backup' Remote Command Execution CVE-2019-12170 Google Dork: inurl:/ATutor/login.php Date: 5/13/2019 Exploit Author: liquidsky Joseph McPeters Vendor Homepage: https://atutor.github.io/ Software Link:...

CVE-2022-0492

CVE-2022-0492 Container Escape Analysis toc Vulnerability Overview Vulnerability ID: CVE-2022-0492 Vulnerable Product: linux kernel - cgroup Affected Versions: linux kernel 5.17-rc3 Vulnerability Impact: When a container does not have additional security measures enabled, an attacker with root...

CVE-2023-0386

README root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Background pfBlockerNG is the Next Generation of pfBlocker with the following features: 1. Manage IPv4/v6 List Sources into 'Deny, Permit or Match' formats. 2. GeoIP database by MaxMind Inc. GeoLite2 Free version. 3. De-Duplication, Suppression, and Reputation...

PrintNightmare-CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...

CVE-2021-26084

CVE-2021-26084 Confluence OGNL injection CVE-2021-26084 is an Object-Graph Navigation Language OGNL injection vulnerability in the Atlassian Confluence Webwork implementation. An unauthenticated, remote attacker could exploit this flaw by sending a specially crafted request to vulnerable endpoint...

X-force

IBM X-Force Exchange library | IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. For others applications. See ---|--- Install root@kitploit: pip3 install XForce Use Using you APIKEY make a basic authentication. Se...

CVE-2024-24576-PoC

CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink control href attribute escape vulnerability CVE-2022-44666 0day. هذه قصة عن 0day أخرى منسية تم الكشف عنها بالكامل منذ أكثر من 4 سنوات بواسطة John Page aka hyp3rlinxR.1. لفهم التقرير، عليك أن تضع في اعتبارك أنني غبي :- وغبائي يدفعني لاتخاذ مسارات...

CVE-2022-29622

CVE-2022–29622: Analyse de Invulnérabilité Ce code a été créé pour aider les professionnels de la sécurité et les développeurs à comprendre pourquoi je pense que Formidable n'était pas vulnérable à CVE-2022-29622. J'ai rédigé mon analyse ici : CVE-2022–29622: Analyse de Invulnérabilité Comme...

CVE-2022-31814

pfBlockerNG = 2.1.426 बिना प्रमाणीकरण RCE यह स्क्रिप्ट pfBlockerNG = 2.1.426 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है जो रिमोट कोड निष्पादन remote code execution की अनुमति देता है। यह एकल लक्ष्य URL या URL की सूची लेता है, एक शेल अपलोड करता है, एक कमांड निष्पादित करता है, और फिर शेल को हटा देता...

AzureGraph

AzureGraph AzureGraph is an Azure AD information gathering tool over Microsoft Graph. Thanks to Microsoft Graph technology, it is possible to obtain all kinds of information from Azure AD, such as users, devices, applications, domains and much more. This application, allows you to query this data...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Unauthenticated Arbitrary File Upload Description The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

bluing

Bluing An intelligence gathering tool for hacking Bluetooth English · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing formerly bluescan is a Blu etooth In telligence G athering tool written primarily in Python. It can help us snoop on the...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

CVE-2016-0728

CVE-2016-0728 Seccamp 2017 Assignment The following program exploits a vulnerability present in the Linux kernel versions 3.8 to 4.4. Explain the malfunction that occurs when this program is executed. Also, write an exploit that achieves root privilege escalation by further exploiting this...

CVE-2023-32073

WWBN AVideo currentVersion RCE authentifié Une vulnérabilité d'injection de commande existe dans plugin/CloneSite/cloneClient.json.php qui permet l'exécution de code à distance si vous utilisez le plugin CloneSite. Il s'agit d'un contournement du correctif pour CVE-2023-30854 qui affecte WWBN...