CVE-2026-36851

CVE-2026-36851 Path traversal / arbitrary file read in UnPoller v2.33.0 via the file:// password prefix. File contents are read from disk and transmitted to the configured UniFi controller URL during authentication...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

CVE-2022-29464

Exploit CVE-2022-29464 Este repositorio contiene un script para explotar la vulnerabilidad CVE-2022-29464, que permite subir archivos a servidores vulnerables. Úsalo únicamente en entornos autorizados y con fines educativos. Requisitos Python 3.8 o superior Instalación Paso 1: Clonar el repositor...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux의 기본 문서 뷰어 deepin-reader RCE CVE-2023-50254: 패치되지 않은 Deepin Linux 데스크톱에 영향을 주는 Deepin-reader RCE용 PoC 익스플로잇입니다. Deepin Linux의 기본 문서 리더인 "deepin-reader" 소프트웨어는 설계 결함으로 인해 조작된 docx 문서를 통한 원격 명령 실행으로 이어지는 심각한 취약점이 있습니다. 상세 정보 deepin-reader는 운영 체제 Deepin Linux의 기본 문서 뷰어입니...

cve-2026-85706

cve-2026-85706 GitLab CE/EE의 인증되지 않은 임의 로컬 파일 읽기 취약점. 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1 버전에 영향을 미친다. 19.1.8 / 19.2.6 / 19.3.2에서 수정됨 2026-09-10. CVSS 10.0, 실제 공격에서 악용된 것으로 보고됨. 최초 보고는 s3ntago가 했으며 이 저장소는 단지 나의 분석 글 + PoC일 뿐이다. 면책 조항 이 PoC는 교육 및 방어적 연구 목적으로만 공개되었으며, 관리자와 연구자가 취약점을 이해하고 테스트하...

CVE-2021-41773

Apache Path Traversal & RCE Exploit CVE-2021-41773 & CVE-2021-42013 These are critical path traversal vulnerabilities affecting Apache HTTP Server 2.4.49 and 2.4.50. They allow attackers to: Access files outside the web root LFI Achieve Remote Code Execution RCE if CGI is enabled Both...

Invoke-CVE-2022-22965-SafeCheck

Invoke-CVE-2022-22965-SafeCheck PowerShell port of CVE-2022-22965 by colincowie's original python version. Install: root@kitploit: iexiwr https://raw.githubusercontent.com/daniel0x00/Invoke-CVE-2022-22965-SafeCheck/main/Invoke-CVE202222965-SafeCheck.ps1 -UseBasicParsing.content Usage:...

CVE-2017-9833

CVE-2017-9833 Reference: https://www.cvedetails.com/cve/CVE-2017-9833/ Shodan dork: product:"Boa Web Server" 0.94.14rc21 Payload: /cgi-bin/wapopen/?FILECAMERA=../../etc/shadow POC:...

CVE-2022-32060

Snipe-IT Version v6.0.2 Vulnerability Explanation: An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file. Attack Vectors: We found a vulnerability file upload, when we upload malicious file...

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apache HTTP Server Exploited On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the mo...

SharpWMI

SharpWMI SharpWMI es una implementación en C de varias funcionalidades de WMI. Esto incluye consultas WMI locales/remotas, creación remota de procesos a través de win32process y ejecución remota de VBS arbitrario mediante suscripciones a eventos WMI. También se admiten credenciales alternativas...

CVE-2025-0851

CVE-2025-0851 This vulnerability occurs in the Deep Java Library an open-source framework for Java deep learning when providing utilities for extracting tar and zip model archives used for loading models. A File Traversal vulnerability arises in the untar and unzip functions. Details: When creati...

BGGP

Binary Golf Grand Prix このリポジトリには、Binary Golf Grand Prix のファイルが年ごとに分類されています。BGGP は年次の小ファイルコンテストであり、参加者は指定された機能を実行する可能な限り小さなファイルを作成します。ファイルサイズは最大 4096 バイトです。 年| テーマ| 説明 ---|---|--- BGGP1 2020| 回文| 前方と後方で同じ動作をする最小のバイナリ。ファイルのミラーリングされた半分で実行する必要があります BGGP2 2021| ポリグロット|...

NxRansomware

NxRansomware Una nueva generación de ransomware. Completamente escrito usando .Net Framework + Sistema C&C Creado por: Guilherme Bacellar Moralez Descargo de responsabilidad Este código está creado y mantenido solo con fines de investigación. Por favor, no lo uses para otros fines. Por favor, no...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage root@kitploit: echo "+-------------------For-The-Help-------------------------------------+"; ec...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client. Affected Version CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit To exploit just load any file as SNX config using the -f paremeter. If the...

CVE-2021-43798-Grafana-Exp

Grafana V8. Arbitrary File Read Exploit – Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is commonly used as a visualizer for time series data and application analytics in infrastructure, and is also widely adopted in oth...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon은 CVE-2021-26855의 공식적인 일반 이름으로, Microsoft Exchange Server에서 인증을 우회하고 관리자로 가장할 수 있게 하는 취약점입니다. 또한 이 버그를 인증 후 임의 파일 쓰기 취약점인 CVE-2021-27065와 연결하여 코드 실행을 달성했습니다. 영향을 받는 모든 구성 요소는 기본적으로 취약합니다! 그 결과, 인증되지 않은 공격자는 443 포트만 열려 있어도 Microsoft Exchange Server에서 임의의 명령을 실행할 수 있습니...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Arrastrar y soltar múltiples archivos para Contact Form 7 Descripción: Subida de archivos arbitrarios a través de drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 permite la subida de archivos .phar, lo que conduce a ejecución remota de código en...

CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...