Openfire-RCE-CVE-2023-32315-

This repository does not have a README...

CVE-2024-37770

CVE-2024-37770 description 14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Attack Vector Unauthenticated attackers can execute command injecti...

CVE-2023-38646

CVE-2023-38646 Fork ofkh4sh3i's removing the need for Burp Collector. CVE-2023-38646 Pre-Auth RCE in Metabase: Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication ...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

CVE-2023-33733-Exploit-PoC

CVE-2023-33733-POC Disclamer I did not, nor do I take credit for finding this vulnerability. This is simply a script I built to more easily exploit this vulnerability for a CTF. For the oiriginal information please reference: https://github.com/c53elyas/CVE-2023-33733 This script is simply intend...

CVE-2023-24489-poc

CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It needs a list of target.txt full of the targets you want to test in this format: https://example1.com https://example2.com https://example3.com The file must be within the same dir where the bash script is executed. Please use with caution !...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability CVE-2016-5734 Setup git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 exploit python3 cve-2016-5734.py -u root --pwd="root"...

cve-2018-15133

POC - CVE-2018-15133 Usage: $ ./CVE-2018-15133 -h Usage: ./CVE-2018-15133 options Options: -APIKEY string API key del sitio web de Laravel, codificada en base64 -URL string URL del sitio web de Laravel a atacar -command string Comando a ejecutar en el sitio web vulnerable; si no se especifica, se...

Poc-CVE-2024-21542

Poc-CVE-2024-21542 Overview luigi is a package that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization, handling failures, command line integration, and much more. Affected versions of this package are vulnerable to Arbitrary File...

CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274 Summary OpenSSL-src-rust is a source code and logic to build OpenSSL from source written in rust and packaged as a crate. There are currently two maintained branches, matching the two maintained OpenSSL versions whi...

CVE-2024-22274-RCE

Privilege Escalation: VMware vCenter Server Authenticated RCE 📜 Description The “com.vmware.appliance.recovery.backup.job.create” and the “com.vmware.appliance.recovery.backup.validate” API components are vulnerable to a flag injection attack that can be leveraged to execute arbitrary commands as...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Unauthenticated Arbitrary File Creation Description: The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including,...

TRENDnet TV-IP302PI NTP address command injection RCE

Authenticated CGI/ONVIF SetNTP: msntp -r sink with semicolon/command substitution in NtpIP / hostname field. """TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reaching Root Execution Through a Shell-Form system Call CWE-78""" from future import annotations from types...

NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST

NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST """NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST""" from future import annotations from kittysploit import import socket import ssl import sys import time import re import os...

Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Cr — Detect

Fingerprint / reachability check for Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Abyss Web Server X1 2.16.22.0...

Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archi — Detect

Fingerprint / reachability check for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archive Import Leading to Unauthenticated Root Code Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in...

DrayTek Vigor uploadlangs command injection root RCE

Authenticated language pack upload: filename passes cgiEscape only & then systemmv ... with ; injection. !/usr/bin/env python3 -- coding: utf-8 -- """DrayTek Vigor uploadlangs filename command injection root RCE.""" from future import annotations import uuid from kittysploit import from...

CatDV empty admin password aaftoolPath RCE

Login as admin with factory empty password, override aaftoolPath, trigger AAF export optional sshkey to stage /tmp/evil.sh. """CatDV factory-default empty admin password → aaftoolPath root RCE.""" from future import annotations import base64 import json import os import re import subprocess from...

CIRCUTOR PowerStudio JWT alg=none forgery

Forge alg=none Admin JWT and access protected admin/microservice routes. When events.xml accepts the token, delivers shellExecute for Windows cmd/payload. """CIRCUTOR PowerStudio JWT alg=none admin forgery auth bypass chain primitive.""" from future import annotations import base64 import json...

Cisco CUCM Axis fmService exec stage RCE

Final chain stage: SOAP util:exec on /controlcenterservice/services/fmService with Basic axisauth prior SQLi/webshell stages manual. """Cisco CUCM Remote Code Execution Chain""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient from...