147 matches found
docker-cve-2021-41773
CVE-2021-41773 Una demostraciΓ³n para mostrar la vulnerabilidad CVE-2021-41773 en un contenedor docker. Uso Servidor ejecuta build.sh ejecuta docker build root@kitploit: ./scripts/build.sh NOTA: No es necesario hacerlo mΓ‘s de una vez ejecuta deploy.sh crea un contenedor docker con la imagen de...
Follina-attack-CVE-2022-30190-
Follina-attack-CVE-2022-30190- esta es un ataque de demostraciΓ³n del exploit FOLLINA, una vulnerabilidad que fue descubierta en mayo de 2022 y permaneciΓ³ sin parchear hasta junio de 2022...
log4shell-poc-lab
DemostraciΓ³n de PoC de Log4Shell Este repositorio contiene un submΓ³dulo, clΓ³nalo con: root@kitploit: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Luego, para iniciar la demostraciΓ³n, ejecuta: root@kitploit: docker compose up Para ver el exploit creando...
Log4Shell-demo
Log4Shell in action This project aims to demonstrate how the Log4Shell / CVE-2021-44228 vulnerability works. Requirements You only need to have Docker installed. Ideally you have two different virtual machines. One for the vulnerable server and one for the malicious server that will host the...
Exploit for CVE-2026-27778
PoC-SimulatorCVE-2026-27778...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Demonstration of the Log4jShell Exploit This code may contain...
Exploit for CVE-2025-40554
CVE-2025-40554 β SolarWinds Web Help Desk Auth Bypass PoC Pro...
Exploit for CVE-2025-36911
WPair CVE-2025-36911 eg WhisperPair Vulnerability Scanner...
π Laravel Pulse 1.3.1 Arbitrary Code Injection
Proof of concept exploit written in PHP for Laravel Pulse version 1.3.1. This version of Laravel Pulse suffers from an arbitrary code injection vulnerability...
EUVD-2008-5514
Malware in sbrugna...
Exploit for CVE-2025-8625
CVE-2025-8625 β PoC ΠΠ±Π·ΠΎΡ Π ΡΠ΅ΠΏΠΎΠ·ΠΈΡΠΎΡΠΈΠΈ Ρ ΡΠ°Π½ΡΡΡΡΡ ΠΈΡΡ ΠΎΠ΄Π½ΡΠ΅...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CVE-2025-5777 Exploit Tool π₯ A powerful educational tool...
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Description A Remote Code Execution RCE vulnerability exists in the modelscope/ms-swift project due to unsafe use of yaml.load in combination with vulnerable versions of the PyYAML library β€ 5.3.1. The issue resides in the tests/run.py script, where a user-supplied YAML configuration file is...
Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
Exploit Title: Pterodactyl Panel 1.11.11 - Remote Code Execution RCE Date: 22/06/2025 Exploit Author: Zen-kun04 Vendor Homepage: https://pterodactyl.io/ Software Link: https://github.com/pterodactyl/panel Version: 1.11.11 Tested on: Ubuntu 22.04.5 LTS CVE: CVE-2025-49132 import requests import js...
Exploit for CVE-2024-55656
CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow R...
Exploit for Deserialization of Untrusted Data in Google Android
Exploration of CVE-2024-31317 CVE-2024-31317 provides unprivi...
Exploit for Deserialization of Untrusted Data in Apache Parquet_Java
TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution...
Exploit for Code Injection in Foxcms
POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution...
π phpMyFAQ 3.1.7 Cross Site Scripting
phpMyFAQ version 3.1.7 suffers from a cross site scripting vulnerability. Exploit Title: phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting XSS Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/thorsten/phpMyFAQ Software Link: https://github.com/thorsten/phpMyFAQ Versio...
OpenPanel Copy and View functions in the File Manager 0.3.4 - Directory Traversal
Exploit Title: OpenPanel Copy and View functions in the File Manager 0.3.4 - Directory Traversal Date: Nov 25, 2024 Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macO...