CVE-2021-34481

CVE-2021-34481 Verificar parche para CVE-2021-34481 Vulnerabilidad de ejecución remota de código en Print Spooler de Windows https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481...

CVE-2022-47966-Scan

CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE PoC simple...

CVE-2024-32002-hook

CVE-2024-32002-hook CVE-2024-32002-hook...

CVE-2022-35405

CVE-2022-35405 My blog post Nuclei template Other article ManageEngine PAM360 and Password Manager Pro unauthenticated remote code execution vulnerability PoC Access Manager Plus authenticated only :...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc que incluye soporte de reverse-shell y contraseña. Siéntete libre de añadir más cosas : ¿Cómo probarlo? root@kitploit: $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname...

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Exploit - Buffer Overflow Vulnerability This repository contains a Python script that exploits a buffer overflow vulnerability in the TOTOLINK AC1200 T8 version v4.1.5cu.861B20230220 in the setWiFiAclRules function via the desc parameter. Vulnerability Details...

cve-2023-46747

CVE-2023-46747 Exploit Script This script exploits the F5 BIG-IP TMUI remote code execution vulnerability CVE-2023-46747. It allows an unauthenticated attacker to execute arbitrary commands on a vulnerable F5 BIG-IP system. Table of Contents Features Requirements Usage Parameters How It Works...

CVE-2024-46377

CVE-2024-46377 PoC para la Vulnerabilidad de Carga de Archivos Arbitraria en Best House Rental Management System 1.0 Descripción general Este script de Python demuestra cómo explotar la vulnerabilidad de carga de archivos arbitraria en Best House Rental Management System 1.0. La vulnerabilidad...

SMB-LINUX-CVE-2025-37899

Vulnerabilidad Use-After-Free en ksmbd del Kernel de Linux CVE-2025-37899 Descripción Se ha descubierto una vulnerabilidad de tipo use-after-free en el módulo ksmbd del kernel de Linux, responsable de la implementación del protocolo SMB Server Message Block para el intercambio de archivos en red...

go-get-rce

go-get-rce CVE-2018-6574...

MultiExploit

Multi-Service Vulnerability Scanner Supported Vulnerabilities & Attack Vectors Microsoft SQL Server Vulnerabilities CVE-2023-21173 : Remote Code Execution in SQL Server 2022 Potential exploitation of: Weak authentication configurations Misconfigured server principals xpcmdshell abuse Advanced...

nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Algunas notas de depuración y exploit no ciego Exploit Usa burpsuite, modifica ls / -al en la petición; ten en cuenta que las comillas dobles se reemplazarán por comillas simples root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintos...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell y exportación automática de PCAP -- SOLO PARA USO EDUCATIVO -- El autor no es responsable ni se le puede exigir responsabilidad por cualquier acción realizada con cualquier aspecto de este proyecto/repositorio. Lo creé con el propósito de comprender el ataque y...

PoC_CVE-2019-10149--rce

About Remote Command Execution into shell from a vulnerable exim service. Vulnerable versions go from 4.87 to 4.91 inclusive. Check https://nvd.nist.gov/vuln/detail/cve-2019-10149. The following script is based on Qualys PoC. Check...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

log4j2-rce-poc

POC de Vulnerabilidad RCE en Log4j2 Una prueba de concepto mínima para la vulnerabilidad de Ejecución Remota de Código JNDI en Log4j2 CVE-2021-44228. Está destinada a fines educativos para ayudar a personas que no son investigadores de seguridad a entender cómo funciona y qué tan grande es el...

CVE-2023-36159

CVE-2023-36159 Cross Site Scripting XSS vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...