CVE-2021-41773

CVE-2021-41773 Proyecto poc&exp en lenguaje Go. Aviso: este proyecto proviene de las notas de estudio diarias del autor. No utilice las tecnologías y herramientas relacionadas para realizar pruebas ilegales; el autor no es responsable de las consecuencias adversas que puedan derivarse de ello. Us...

Heptagram

Heptagram Este proyecto se utiliza para recopilar los EXP/POC divulgados en Internet y proporcionar soporte de proyecto para el equipo de seguridad de Heptagram...

CVE-2021-31805

CVE-2021-31805 1. Introducción Vulnerabilidad de ejecución remota de comandos de Struts2 CVE-2020-17530 y CVE-2021-31805 POC&EXP 2. Uso Introducción de parámetros root@kitploit: -u 目标url -m dnslog|exp //默认有回显界面字符检查 -n s2-062 //默认s2-061 -s windows //默认linux -p 漏洞参数 Detección con respuesta visible...

CVE-2020-5902-POC-EXP

CVE-2020-5902-POC-EXP Usage root@kitploit: python3 f5rce.py scan iplisttxt python3 f5rce.py https://test.cn:443 ifconfig Scan Mode RCE Mode...

CVE-2024-4577

Put the files to be scanned into urls.txt and then directly run POC.py Execute the command using EXP.py...

spring-spel-0day-poc

spring-spel-0day-poc spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function header root@kitploit: spring.cloud.function.routing-expression:Tjava.lang.Runtime.getRuntime.exec"open -a calculator.app" build root@kitploit: wget...

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

CodeTest

Welcome to CodeTest 👉About This Project The main purpose of this project: to provide a unified execution entry point using a visual interface for Python POC\EXP test scripts collected daily, making it convenient to run. Target audience: penetration testers with a Python foundation the tool comes...

CVE-2020-0796-exp

CVE-2020-0796-exp CVE-2020-0796-exp...

py-CVE-2021-41773

CVE-2021-41773 Proyecto de PoC y exp en lenguaje Python. Declaración: este proyecto proviene de las notas de estudio diarias del autor. No utilice las tecnologías ni herramientas relacionadas para realizar pruebas ilegales; el autor no se hace responsable de las consecuencias adversas que puedan...

ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider

Summary A token lifecycle validation vulnerability was discovered in ZITADEL's external JWT Identity Provider IdP implementation Specifically, within the validation pipeline, if an incoming JWT omits the exp claim entirely, the expiration block is silently skipped rather than rejected. The token ...

CVE-2019-2725

POC-EXP Este script está dirigido a la vulnerabilidad de deserialización RCE CVE-2019-2725 en Weblogic. Antes de usarlo, modifique la dirección de escucha del VPS y, durante la ejecución, proporcione la URL específica para completar la prueba. La dirección de prueba es:...

CVE-2021-36955-EXP

CVE-2021-36955-EXP...

weblogic_wls_rce_poc-exp

weblogicwls-wsatcomponentdeserialisationrcecve-2017-10271 poc&exp exp only works while the path is exist can works for single or multiple ==just for learn==...

CVE-2019-0708

CVE-2019-0708 Collect POC and EXP for CVE-2018-0708 from the internet currently no EXP found...

Freak-Scanner

Freak-Scanner Multithreaded Python FREAK scanner, used to detect SSL EXP Ciphers, vulnerable to CVE-2015-0204 It's pretty quick, should be able to scan just shy of 1k hosts in an hour. The output is messy though, you'll have to grep on Vulnerable/NotVulnerable I'll try to clean this up later if...

exp-labs

exp-labs Cybersecurity Training Platform This modern web secu...

Linux Distros Unpatched Vulnerability : CVE-2026-64537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bridge: cfm: reject invalid CCM interval at configuration time ccmtxworkexpired re-arms itself via queuedelayedwork using the configured expinterval converted b...

SUSE CVE-2026-53398

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinexp after decoding sinstyle. If the XDR stream is truncated, the decoder returns nfserrbadxdr before sinexp is initialized. Since comm...

CVE-2026-53398 NFSD: Fix SECINFO_NO_NAME decode error cleanup

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinexp after decoding sinstyle. If the XDR stream is truncated, the decoder returns nfserrbadxdr before sinexp is initialized. Since comm...