exploits

Repositório de Exploits Públicos de Prova de Conceito Este repositório contém exploits públicos de prova de conceito PoC para várias vulnerabilidades que descobri ao longo do tempo. Esses exploits PoC são compartilhados para fins educacionais e para demonstrar os riscos potenciais associados a...

React2Shell

React2Shell - CVE-2025-55182 और CVE-2025-66478 लेखक: LAKSHMIKANTHAN K letchupkt Instagram: @letchupkt संस्करण: 2.0.0 Obfuscated दिनांक: 2025-12-07 🚀 त्वरित शुरुआत स्कैनर चलाएँ root@kitploit: python react2shell.py बस इतना ही! स्कैनर यह करेगा: 1. अपनी अखंडता सत्यापित करेगा 2. कोड को डीकंप्रेस करेगा...

PrintNotifyPotato

PrintNotifyPotato PrintNotifyPotato Eine weitere Potato, die den PrintNotify-COM-Dienst zum Anheben von Rechten nutzt Für Windows 10 - 11 und Windows Server 2012 - 2022 Verwendung root@kitploit: C:\Windows\Temp PrintNotifyPotato.exe aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa...

shodscript

ShodScript Automatizza l'esecuzione di exploit e PoC sui risultati di ricerca di Shodan. Interroga Shodan, filtra i target ed esegui i tuoi script contro ogni corrispondenza - in modo concorrente, con output strutturato ed esportazione. Perché Hai uno script PoC che accetta un IP e una porta. Vuo...

inception

नोट: यह टूल अब सक्रिय विकास के अधीन नहीं है, कृपया PCILeech देखें। INCEPTION Inception एक भौतिक मेमोरी हेरफेर और हैकिंग टूल है जो PCI-आधारित DMA का दोहन करता है। यह टूल FireWire, Thunderbolt, ExpressCard, PC Card और किसी भी अन्य PCI/PCIe HW इंटरफेस पर हमला कर सकता है। Inception का लक्ष्य DMA का...

CVE-2024-1086

CVE-2024-1086 यूनिवर्सल लोकल प्रिविलेज एस्केलेशन Proof-of-Concept एक्सप्लॉइट CVE-2024-1086 के लिए, जो v5.14 और v6.6 के बीच के अधिकांश Linux कर्नेल पर काम करता है, जिसमें Debian, Ubuntu और KernelCTF शामिल हैं। KernelCTF इमेजेज में सफलता दर 99.4% है।...

morris-worm

इस रिपॉजिटरी में README नहीं है।...

webapp-exploits

webapp-exploits Entwicklung von Webanwendungs-Exploits...

CVE-2026-70559-PoC

CVE-2026-70559-PoC Para obter este PoC - Junte-se https://t.me/thecodeb0ss...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

Joomla! Cmimarketplace 0.1 - Local File Inclusion

Joomla! Cmimarketplace 0.1 is susceptible to local file inclusion because comcmimarketplace allows remote attackers to list arbitrary directories via a .. dot dot in the viewit parameter to index.php. id: CVE-2009-1496 info: name: Joomla! Cmimarketplace 0.1 - Local File Inclusion author: daffainf...

Joomla! Component com_janews - Local File Inclusion

A directory traversal vulnerability in the JA News comjanews component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1219 info: name: Joomla! Component comjanews - Local File Inclusion author: daffainf...

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion

A directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1723 info: name:...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Apache Solr DataImportHandler <8.2.0 - Remote Code Execution

Apache Solr is vulnerable to remote code execution vulnerabilities via the DataImportHandler, an optional but popular module to pull in data from databases and other sources. The module has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug...

Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion

In avataruploader v7.x-1.0-beta8 the view.php program doesn't restrict file paths, allowing unauthenticated users to retrieve arbitrary files. id: CVE-2018-9205 info: name: Drupal avataruploader v7.x-1.0-beta8 - Local File Inclusion author: daffainfo severity: high description: In avataruploader...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD through version 4.11.01 is vulnerable to cross-site scripting via the /assets/add/ssl-provider-account.php Username field. id: CVE-2018-20010 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD through version 4.11.01 is...

Joomla! Component SMEStorage - Local File Inclusion

A directory traversal vulnerability in the SMEStorage comsmestorage component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. id: CVE-2010-1858 info: name: Joomla! Component SMEStorage - Local File...

Joomla! Component Jstore - 'Controller' Local File Inclusion

A directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-5286 info: name: Joomla! Component Jstore - 'Controller...

Joomla! Component TweetLA 1.0.1 - Local File Inclusion

A directory traversal vulnerability in the TweetLA comtweetla component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1533 info: name: Joomla! Component TweetLA 1.0.1 - Local File Inclusion author: daffain...