CVE-2023-46980

CVE-2023-46980 An issue in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. Additional Information Video POC Link On YT ; https://youtu.be/3Mz2lSElg7Y Vulnerability Type Incorrect Access...

casper-shell

🦇 Casper@shell: - Advanced PHP Web Shell Casper@shell: is an enhanced, more user-friendly version of p0wny shell with many new features. This version aims to be more helpful for quickly performing reconnaissance, exfiltration, or deploying persistence mechanisms. ✨ Features 🖥️ Advanced Terminal...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0)

Summary Vulnerabilities exists in IBM Cloud Pak for Data System CPDS 1.0 addressed in 11.3.1.2-IF1 Vulnerability Details CVEID:CVE-2025-38527 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can...

CTT-enhanced-VMware-vCenter

CTT-enhanced-VMware-vCenter Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 CVSS 9.8 as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements. 🔥 What This CTT Enhancement Actually Does: 1...

CVE-2024-48990

CVE-2024-48990 !WARNING These files and informations are intended for educational purpose only. The author is not responsible for any malicious behavior. All informations provided are not intended to incite any type of crime or abuse. Description Qualys discovered that needrestart, before version...

CVE-2020-14882

CVE-2020-14882 CVE-2020–14882 - investigación por Jang Código por @s1kr10s Poc: Revisión / Vídeo: root@kitploit: https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf https://www.youtube.com/watch?v=JFVDOIL0YtA&feature=youtu.be...

CVE-2022-3294

Exploit Reference: https://github.com/kubernetes/kubernetes/issues/113757 https://github.com/kubernetes/kubernetes/issues/119640 https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/security-audit-2021-2022/findings/Kubernetes%20v1.24%20Final%20Report.pdf Enumeration: ...

super clearfog-v1.2.6

📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch exploitation and patch video: https://www.youtube.com/watch?v=XU-U4K270Z4 Qihoo 360 blog post...

log4v-vuln-check

Log4JS Escáner de Archivos y Vulnerabilidades + Escáner de Enlace de Puertos Locales Este script se utiliza para realizar una verificación rápida para ver si su servidor posiblemente está afectado por CVE-2021-44228 la vulnerabilidad log4j. No proporciona una garantía del 100 % de que no sea...

JoomlaCVE20168869

Exploit para Joomla 3.4.4 - 3.6.4 CVE-2016-8869 y CVE-2016-8870 con subida de archivos web shell Esta es una versión en PHP, el código fuente original en Python fue proporcionado por @link https://github.com/XiphosResearch/exploits/tree/master/Joomraa Usage: php exploit.php --username hacker -p...

scan_CVE-2020-29583

Scanner for Zyxel products which are vulnerable due to an undocumented user account CVE-2020-29583 Vuln details: https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html But I'm not sure if it's really possible to login with zyfwp via the web interface? Any reports would be...

rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways Potentially unpatched CVE-2020-0609 and CVE-2020-0610 The scanner has 2 modes of operation: Check for systems vulnerable to CVE-2020-0609 on UDP 3391 Uses the vuln scan code of https://github.com/MalwareTech/RDGScanner Disclaimer Scanning for memory corruption...

heartbleed

HEARTBLEED : VULNERABILIDAD HEARTBLEED DE OpenSSL TLS Extensión Heartbeat de OpenSSL TLS - Divulgación de memoria - Escáner y exploit de vulnerabilidad para múltiples versiones SSL/TLS necesita: root@kitploit: sudo apt-get install nmap lolcat java root@kitploit: sudo apt install default-jre...

CVE-2023-34843

CVE-2023-34843 Divulgación traggo/server versión 0.3.0 es vulnerable a directory traversal. Pasos para reproducir: 1. Configura traggo/server en tu endpoint/servidor. https://traggo.net/install/ 2. Haz una solicitud GET a la siguiente URL. curl -X GET...

VMware_vCenter_CVE-2021-21972

VMwarevCenterCVE-2021-21972 Herramientas relacionadas con VMware vCenter CVE-2021-21972 Invoke-CVE-2021-21972-Scan.ps1 Este script escaneará los hosts objetivo especificados e intentará detectar aquellos que son vulnerables a VMware vCenter CVE-2021-21972. El script se ejecutará en el siguiente...

CVE-2025-12748

CVE-2025-12748 Eng Rus Credit: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Issues: 687, 825 English Description An issue was discovered in the XML file processing procedure. The processing of the file's content is performed before the ACL check. This allows a user with limited permissio...

Invoke-noPac

Invoke-noPac El ensamblado .Net está basado en mi fork https://github.com/ricardojba/noPac que tiene algunos cambios de código para mejorar el original. Cargador de ensamblado .Net estilo PowerSharpPack para el escáner y exploit CVE-2021-42287 - CVE-2021-42278 noPac. Uso: root@kitploit:...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Details The vulnerability exists in the updateqrcode method of the...

Set-ZerologonMitigation

Set-ZerologonMitigation Proteja sus controladores de dominio contra Zerologon CVE-2020-1472. Uso Después de instalar la actualización de seguridad de agosto de 2020 o una versión acumulativa posterior, simplemente ejecute el script en cada uno de sus controladores de dominio. root@kitploit:...