CyberPanel-RCE

CyberPanel-RCE Exploit pour la RCE de CyberPanel trouvée sur v2.3.6 Plus d'informations disponibles sur mon blog : https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 Proof of concept Exploit RCE in Apache HugeGraph Server Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph Server. Usage 🛠 Exploit multiple targets ☣️ root@kitploit: python3 CVE-2024-27348.py -f targets.txt -c "command to execute"...

DS-Wireless-Communication-Remote-Code-Execution

Exécution de code à distance dans la communication sans fil DS Injecte du code arbitraire dans le jeu d'un client. Prérequis Python 3.10 pip pydivert Utilisation root@kitploit: pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py ID CVE CVE-2023-45887 Licence GNU...

CVE-2018-15133-PoC

CVE-2018-15133-PoC This Python script implements a remote code execution RCE exploit for vulnerable Laravel applications through insecure deserialization, based on the CVE-2018-15133 vulnerability. The exploit takes advantage of a vulnerability in Laravel versions 5.5.40 and earlier, and 5.6.0 to...

PrintNightmare

PrintNightmare Here is a project that will help to fight against Windows security breach PrintNightmare! CVE-2021-34527 You have to know that a patch has been released by Microsoft against this breach but is not fully functional and fight only RCE Remote code execution while LPE Local privilege...

cve-2019-11043

PHP Remote Code Execution Vulnerability CVE-2019-11043 1. Background On September 26, PHP officially released a vulnerability advisory pointing out that servers using Nginx + php-fpm, under certain configurations, have a remote code execution vulnerability. Moreover, this configuration is widely...

Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC for CVE-2024-30085 Proof of Concept exploit for the CVE-2024-30085 privilege escalation vulnerability. For educational and security research purposes only. ⚠️ Legal Warning FOR EDUCATIONAL USE ONLY ✅ Authorized security research ✅ Controlled laboratories ✅ Cybersecurity education ❌...

shlol

SHLOL This is a menu you can trigger with a keybind to do basic stuff for you Really easy to use Create listeners on the fly No copy pasting needed Choose the type, IP and PORT and you are done! Run remote scripts easily Reverse Shell Generator...

CVE-2018-14665

CVE-2018-14665 0x00 Introduction Indian security researcher Narendra Shinde discovered a high-risk vulnerability CVE-2018-14665 in the X.Org Server package that allows a regular account to escalate privileges to root. It affects major Linux distributions including OpenBSD, Debian, Ubuntu, CentOS,...

CVE-2019-7216

CVE-2019-7216 Dans filechucker.cgi version 5.09 et filechuckerprefs.cgi version 4.99e-free-e02, il existe un contournement du filtre, lors du téléversement, qui peut conduire à une exécution de code à distance si l'utilisateur téléverse un fichier malveillant. Le contournement se produit lorsque...

Log4j2-CVE-2021-44228

CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web root@kitploit: mvn dependency:treejava INFO | | +-...

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Check if your firewall is vulnerable to CVE-2024-21762 unauthenticated RCE For more information about the vulnerability: https://cuty.io/TKyfFh Subscribe or join my social networks for more HACKING!! Learn to detect the vulnerability and protect...

CVE-2021-46422_RCE

CVE-2021-46422 RCE Installation root@kitploit: git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt Placez CVE-2021-46422 RCE.py dans le répertoire pocsuite3\pocs cd pocs Utilisation de pocsuite3 URL unique : root@kitploit: pocsui...

CVE-2020-23591

CVE-2020-23591 OPTILINK E-PON "رقم الطراز: OP-XT71000N" مع "إصدار العتاد: V2.2"؛ & "إصدار البرنامج الثابت: OPV3.3.1-191028" تم العثور على ثغرة في "OPTILINK OP-XT71000N إصدار العتاد: V2.2، إصدار البرنامج الثابت: OPV3.3.1-191028" تسمح للمهاجم برفع ملف تعسفي عبر " /mgmdevupgrade.asp " ويمكنها "حذف ك...

CVE-2022-1388-rs

CVE-2022-1388-rs Scanner and Interactive shell for CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust Summary To wrap things up here is an overview of the necessary conditions of a request for exploiting this vulnerability: Connection header must include X-F5-Auth-Token...

CVE-2022-42889-PoC

CVE-2022-42889 a.k.a. Text4Shell RCE Proof of Concept Text4Shell is the popular name of a critical software vulnerability discovered in the Apache Commons Text library see CVE-2022-42889. This repo is meant to demonstrate a Remote Code Execution RCE that leverages this CVE. The vulnerable code is...

CVE-2017-16995

CVE-2017-16995 A record of my own tinkering with the CVE-2017-16995 vulnerability and related analysis Hopefully I can find one myself, lol Overview This vulnerability is an LPE caused by an error in the verifier's branch judgment during BPF virtual execution In essence, it is an integer extensio...

CVE-2026-79675

A flaw was found in NLTK. When processing untrusted input for its per-call options parameter in the java function, NLTK fails to validate Java Virtual Machine JVM options. A remote attacker could exploit this by injecting dangerous JVM flags, such as -agentpath or -javaagent, to achieve arbitrary...

Moodle-authenticated-RCE

Moodle 4.4.0 - Exploit d'exécution de code à distance authentifiée CVE-2024-43425 CVE: CVE-2024-43425 Versions affectées Moodle 4.4 à 4.4.1 Moodle 4.3 à 4.3.5 Moodle 4.2 à 4.2.8 Moodle 4.1 à 4.1.11 Description Cet exploit cible une vulnérabilité d'exécution de code à distance RCE authentifiée dan...

PolyDrop

BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows, Mac, or Linux system as well as malicious source code in the form of the specific script interpreter of choice. Once both the malicious...