229159 matches found
CVE-2018-15133-Lavel-Expliot
This repository does not have a README...
CVE-2019-18634
SUDO VULNERABILITY CVE-2019-18634 Exploit developed in Python for Sudo vulnerability BSS overflow CVE-2019-18634. For studying reasons USE root@kitploit: python run.py Credits https://github.com/Plazmaz/CVE-2019-18634 https://bestwing.me/CVE-2019-18634-analysis.html...
CVE-2023-48123
CVE-2023-48123 CVE-2023-54436 Exp Test CVE-2023-48123...
CVE-2022-46169_POC
Exploit For CVE-2022-46169 Getting Reverse Shell root@kitploit: cactiexploit.py...
CVE-2016-4977-POC
This repository does not have a README...
CVE-2019-17662
CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...
CVE-2019-15107
CVE-2019-15107 Python implementation of CVE-2019-15107 Webmin 1.890-1.920 Backdoor RCE exploit Based on the Metasploit module for the same exploit EDB ID: 47230 Exploit is mostly automatic. See ./CVE-2019-15107.py --help for full range of switches Warning: The code in this repository may be used...
CVE-2022-22963
CVE-2022-22963-Reverse-Shell-Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...
CVE-2022-0847-DirtyPipe-Exploit
A vulnerability was found in Linux Kernel up to 5.10.101/5.15.24/5.16.10 Operating System and classified as critical. This issue affects some unknown processing of the component Pipe Handler. Impacted is confidentiality, integrity, and availability. The weakness was presented 03/08/2022. The...
CVE-2014-6271-IPFire
CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire =2.15 ShellShock RCE Based on the Metasploit module for the same exploit EDB ID: 34839 Exploit is automatic. See ./CVE-2014-6271.py --help for a full range of switches Warning: The code in this repository may be used for academic/ethic...
nmap-vulners
nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...
CVE-2019-0708
CVE-2019-0708 Proof of concept exploit for CVE-2019-0708 Coming soon https://areusecure.se?CVE-2019-0708...
spring-core-rce
CVE-2022-22965: Spring-Core-Rce EXP Features: 1. Vulnerability detection does not write a webshell, simple string output 2. Custom webshell file name and path 3. Does not append to the same file; each detection writes to a different webshell file name 4. Supports writing Behinder webshell 5. Prox...
cve-2019-12735
cve-2019-12735 Docker image that lets me study the exploitation of the VIM exploit here Affected Software Vim 8.1.1365 up to and excluding NeoVim 0.3.6 up to and excluding Install root@kitploit: on Host $ make build $ make run $ make attach This brings you into the container with the vulnerable V...
CVE-2026-78485
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
cve-2025-21756
CVE-2025-21756 n-day analysis An n-day analysis of CVE-2025-21756 based on Michael Hoefler's writeup. My exploit differs from original exploit in the spray step and some other small points. It's here...
CVE-2021-3156-Baron-Samedit
CVE-2021-3156-Baron-Samedit This repo contains my work on clumsily implementing a public 1day exploit for the sudo bug. Wish me luck. If you would like to help please feel free. Compile the provided src/sudo sudoedit has been modified to use AFL harness to get input from STDIN AFL Fuzzy loop cras...
CVE-2024-27348
CVE-2024-27348 This is a repository for Apache HugeGraph Remote Code Execution vulnerabilityCVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services: web: image:...
CVE-2020-2883
CVE-2020-2883 First clone the framework root@kitploit: git clone https://github.com/Y4er/CVE-2020-2555 Then place CVE20202883.java into the src/com/supeream/CVE20202883.java directory Import into IDEA and run CVE20202883.java for RCE! Screenshot...