Lucene search
+L

147 matches found

Kitploit
Kitploit
added 2026/09/13 4:26 p.m.7 views

Follina-attack-CVE-2022-30190-

Follina-attack-CVE-2022-30190- 这是 FOLLINA 漏洞的一个演示攻击,该漏洞于2022年5月被发现,直至2022年6月仍未修补。...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/11 2:42 p.m.6 views

docker-cve-2021-41773

CVE-2021-41773 演示CVE-2021-41773漏洞在Docker容器上的利用。 使用 服务端 运行 build.sh(执行 docker 构建) root@kitploit: ./scripts/build.sh 注意:无需执行多次 运行 deploy.sh(使用 build.sh 构建的镜像创建 Docker 容器) root@kitploit: ./scripts/deploy.sh 关闭容器请运行以下命令: root@kitploit: docker rm --force cve-2021-41773 演示漏洞利用 使用 bash: root@kitploit:...

9.8CVSS8AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/07 5:39 p.m.6 views

log4shell-poc-lab

Log4Shell POC 演示 此仓库包含一个子模块,使用以下命令克隆: root@kitploit: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git 然后启动演示,执行: root@kitploit: docker compose up 要查看在受害服务器上创建文件的漏洞利用,执行: root@kitploit: docker compose exec victim ls -lah /tmp 博客文章...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 2:15 p.m.5 views

Log4Shell-demo

Log4Shell 实战演示 本项目旨在演示 Log4Shell / CVE-2021-44228 漏洞的工作原理。 环境要求 你只需要安装 Docker。理想情况下,你拥有两台不同的虚拟机:一台用作漏洞服务器 ,另一台用作恶意服务器 ,用于托管恶意代码仓库和 LDAP 服务器。 你也可以选择安装 Make 和 Docker Compose ,但并非必须 ,因为本仓库还提供了一个 make.sh 脚本,可以跳过这些要求,从 Docker 容器内部使用它们。 安装 Docker(可选) 如果你尚未安装 Docker,以下是 Debian...

10CVSS7.6AI score0.99999EPSS
SaveExploits368References2
GithubExploit
GithubExploit
added 2026/05/04 5:36 a.m.145 views

Exploit for CVE-2026-27778

PoC-SimulatorCVE-2026-27778...

8.7CVSS5.8AI score0.00601EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/04/06 10:05 a.m.192 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Demonstration of the Log4jShell Exploit This code may contain...

10CVSS5.9AI score0.99999EPSS
SaveExploits368
GithubExploit
GithubExploit
added 2026/01/29 2:53 p.m.235 views

Exploit for CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk Auth Bypass PoC Pro...

9.8CVSS5.9AI score0.58447EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/01/17 5:28 a.m.259 views

Exploit for CVE-2025-36911

WPair CVE-2025-36911 eg WhisperPair Vulnerability Scanner...

7.1CVSS7.2AI score0.07775EPSS
SaveExploits14
Packet Storm
Packet Storm
added 2025/12/18 12:00 a.m.196 views

📄 Laravel Pulse 1.3.1 Arbitrary Code Injection

Proof of concept exploit written in PHP for Laravel Pulse version 1.3.1. This version of Laravel Pulse suffers from an arbitrary code injection vulnerability...

8.8CVSS7.7AI score0.29712EPSS
SaveExploits3
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2008-5514

Malware in sbrugna...

9.3CVSS6.4AI score0.10259EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/10/06 3:47 p.m.232 views

Exploit for CVE-2025-8625

CVE-2025-8625 — PoC Обзор В репозитории храняться исходные...

9.8CVSS7AI score0.00601EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2025/08/07 8:47 p.m.151 views

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-5777 Exploit Tool 🔥 A powerful educational tool...

9.3CVSS8.3AI score0.99953EPSS
SaveExploits20
Github Security Blog
Github Security Blog
added 2025/07/31 2:02 p.m.19 views

MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

Description A Remote Code Execution RCE vulnerability exists in the modelscope/ms-swift project due to unsafe use of yaml.load in combination with vulnerable versions of the PyYAML library ≤ 5.3.1. The issue resides in the tests/run.py script, where a user-supplied YAML configuration file is...

9.8CVSS7.9AI score0.02473EPSS
SaveExploits1References9Affected Software1
Exploit DB
Exploit DB
added 2025/06/26 12:00 a.m.611 views

Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)

Exploit Title: Pterodactyl Panel 1.11.11 - Remote Code Execution RCE Date: 22/06/2025 Exploit Author: Zen-kun04 Vendor Homepage: https://pterodactyl.io/ Software Link: https://github.com/pterodactyl/panel Version: 1.11.11 Tested on: Ubuntu 22.04.5 LTS CVE: CVE-2025-49132 import requests import js...

10CVSS5.2AI score0.54677EPSS
SaveExploits30
GithubExploit
GithubExploit
added 2025/05/20 2:01 p.m.428 views

Exploit for CVE-2024-55656

CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow R...

8.8CVSS8.2AI score0.15009EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2025/04/26 4:46 p.m.777 views

Exploit for Deserialization of Untrusted Data in Google Android

Exploration of CVE-2024-31317 CVE-2024-31317 provides unprivi...

7.8CVSS7AI score0.00779EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2025/04/21 3:28 p.m.251 views

Exploit for Deserialization of Untrusted Data in Apache Parquet_Java

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution...

10CVSS9.4AI score0.43597EPSS
SaveExploits9
GithubExploit
GithubExploit
added 2025/04/17 8:44 a.m.616 views

Exploit for Code Injection in Foxcms

POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution...

9.8CVSS9.8AI score0.46583EPSS
SaveExploits11
Packet Storm
Packet Storm
added 2025/04/16 12:00 a.m.398 views

📄 phpMyFAQ 3.1.7 Cross Site Scripting

phpMyFAQ version 3.1.7 suffers from a cross site scripting vulnerability. Exploit Title: phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting XSS Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/thorsten/phpMyFAQ Software Link: https://github.com/thorsten/phpMyFAQ Versio...

9.8CVSS7.5AI score0.04381EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2025/04/14 12:00 a.m.196 views

OpenPanel Copy and View functions in the File Manager 0.3.4 - Directory Traversal

Exploit Title: OpenPanel Copy and View functions in the File Manager 0.3.4 - Directory Traversal Date: Nov 25, 2024 Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macO...

7.5CVSS8.3AI score0.03266EPSS
SaveExploits5
Rows per page
Query Builder