CVE-2019-15642

CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root...

CVE-2019-6340

CVE-2019-6340 RCE REST de Drupal8, SA-CORE-2019-003 0x01 búsqueda en docker CVE-2019-6340 root@kitploit: NAME DESCRIPTION STARS OFFICIAL AUTOMATED knqyf263/cve-2019-6340 Environment for CVE-2019-6340 Drupal 0 cved/cve-2019-6340 cve-2019-6340 0 0x02 docker pull knqyf263/cve-2019-6340 root@kitploit...

CVE-2019-6340

Drupal Drupal 8.6.x RCE Exploit exploit CVE: CVE-2019-6340 CMS: Drupal CMS Version: Drupal 8.6.x tested condition: -Drupal 8.6.x, 8.6.10 OR Drupal 8.5.11 -RESTful Web Services module is enabled...

CVE-2022-22947

CVE-2022-22947 Spring Cloud Gateway is an API gateway in Spring. Versions 3.1.0 and 3.0.6 inclusive and earlier have a SpEL expression injection vulnerability. If an attacker can access the Actuator API, they can exploit this vulnerability to execute arbitrary commands. Vulnerability Environment...

rome-webshell

Rome WebShell A powerful and delightful PHP WebShell This is a lightweight PHP webshell , using only vanilla JavaScript and CSS, no jQuery/Bootstrap bloat. Features Fully interactive file explorer , browser directories and download files instantly Upload files directly from the browser Execute...

CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

CVE-2022-22947

CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" Descargo de responsabilidad Esta herramienta es solo para estudio, investigación y autoevaluación. No debe utilizarse para fines ilegales. ¡Todos lo...

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

angrgdb

angrgdb Usa angr dentro de GDB. Crea un estado de angr a partir del estado actual del depurador. Instalación root@kitploit: pip install angrgdb echo "python import angrgdb.commands" /.gdbinit Uso angrgdb implementa la API de angrdbg en GDB. Puedes usarlo en scripts como este: root@kitploit: from...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introducción: Apache Struts 2 es un framework de aplicaciones web de código abierto para desarrollar aplicaciones Java EE. Es la segunda generación del framework Struts, lanzado por primera vez el 10 de octubre de 2006. El framework Struts está diseñado para ayudar a...

CVE-2018-7600

CVE-2018-7600 root@kitploit: PoC for CVE-2018-7600 Drupal SA-CORE-2018-002 Drupalgeddon 2. Installation: $ git clone https://github.com/dwisiswant0/CVE-2018-7600 $ cd CVE-2018-7600/ $ composer install Usage: $ php exploit.php WARNING! For Educational Purposes Only! References: -...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- Esta es una versión editada del exploit CVE-2018-19422 para corregir un pequeño pero molesto problema que tuve. Tuve que usar este exploit en un CTF, pero no lograba que funcionara correctamente; simplemente no dejaba de fallar al iniciar sesión. Después de...

Mybb-XSS_SQL_RCE-POC

Mybb-XSSSQLRCE-POC Mybb relaciona CVE-2021-27890 & CVE-2021-27889 con el PoC de RCE Antes de usar: Hay dos archivos aquí: 1.js y attacklisten.py Debes modificar estos dos archivos: 1.js: modifica la URL del foro MyBB y la URL del ataque: root@kitploit: var bashurl =...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC CVE-2025-0411 Details "This vulnerability CVSS SCORE 7.0 allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2025-59528-PoC

CVE-2025-59528 Educational PoC Educational use only. This project is intended for controlled security research, classroom demonstrations, and authorized testing in an isolated lab. Do not use it against systems, networks, applications, or accounts that you do not own or have explicit permission t...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

Expoitation-de-la-vuln-rabilit-CVE-2022-22965

Explotación-de-la-vulnerabilidad-CVE-2022-22965 La vulnerabilidad CVE-2022-22965, conocida como Spring4Shell, es una falla de ejecución remota de código RCE en el framework Java Spring Core, presente en versiones anteriores a 5.3.18 y 5.2.20. Esta vulnerabilidad permite a un atacante inyectar...

cve-2017-7269

Desbordamiento de búfer en la función ScStoragePathFromUrl del servicio WebDAV en Internet Information Services IIS 6.0 de Microsoft Windows Server 2003 R2 permite a atacantes remotos ejecutar código arbitrario mediante un encabezado largo que comienza con "If: http://" en una solicitud PROPFIND,...

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

CVE-2024-4577

CVE-2024-4577 Vulnerability Checker This script is designed to check for the vulnerability described by CVE-2024-4577, which involves exploiting certain PHP configurations to execute arbitrary code remotely. It sends a POST request to specified endpoints on a list of domains and checks if the...