CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx 远程代码执行RCEIngressNightmare root@kitploit: ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit...

linux-privilege-escalation

Escalada de Privilegios en Linux Script de Bash para comprobar y explotar la vulnerabilidad CVE-2022-0847 "Dirty Pipe" de Linux Acerca de esta Prueba de Concepto Este script permite a un usuario sin privilegios en un sistema vulnerable hacer lo siguiente: Modificar/sobrescribir archivos de solo...

cve-2024-10914-port

CVE-2024-10914 portado a rust y python porque sí qué es esto cve-2024-10914 es una vulnerabilidad descubierta recientemente con una puntuación crítica de 9.8 que afecta a algunos routers dlink. como esos routers llegaron a su fin de vida útil EOL, dlink se niega a parchear esta vulnerabilidad...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2026-83548

CVE-2026-83548 is a critical (CVSS 10.0) pre-authentication SSRF vulnerability in the SonicWall SMA1000 Appliance Work Place interface, caused by an unintended alternate access path (CWE-918/CWE-441). A remote unauthenticated attacker can exploit it to access sensitive functionality and perform u...

CVE-2024-38793-PoC

CVE-2024-38793-PoC CVE-2024-38793のエクスプロイトのための概念実証コード（Best Restaurant Menu by PriceListo = 1.4.1 - Authenticated Contributor+ SQL Injection） 概念実証 これは、WordPressプラグインBest Restaurant Menu a.k.a Great Restaurant Menu WPのバージョン1.4.2未満に対するSQLインジェクション脆弱性CVE-2024-38793の概念実証エクスプロイトです。...

CVE-2024-10958-WPPA-Exploit

WordPress WP Photo Album Plus 任意短代码执行 CVE-2024-10958 WordPress WP Photo Album Plus 插件中存在未经身份验证的任意短代码执行漏洞的 PoC 代码。 详情 受影响版本： = 8.8.08.007 CVSS 分数： 7.3（高） 漏洞类型： 任意短代码执行 漏洞描述 WP Photo Album Plus 插件由于在 getshortcodedrenderedfenodelay AJAX action 中存在验证缺失，允许未经身份验证的用户执行任意短代码。 参考资料 Wordfence Threat Intel...

CVE-2025-14736

CVE-2025-14736 Frontend Admin by DynamiApps - 未认证权限提升 作者： Hyun Chiya 漏洞信息 字段| 值 ---|--- CVE ID| CVE-2025-14736 插件| Frontend Admin by DynamiApps 受影响版本| B"Extract Nonce acfnonce & Form ID acfform" B -- C"Construct POST payload with 'role'='administrator'" C -- D"POST to /wp-admin/admin-ajax.php" D ...

CVE-2024-25641-Exploit-for-Cacti-1.2.26

CVE-2024-25641 Exploit for Cacti 1.2.26 Cacti 1.2.26 の CVE-2024-25641 を悪用します。認証されたユーザーが存在する場合、任意のファイル書き込みの脆弱性によりリモートコード実行 RCE が可能になります。 概要 このスクリプトは、Cacti 1.2.26 における CVE-2024-25641 の悪用プロセスを自動化します。この脆弱性により、Import Templates 権限を持つ認証済みユーザーが Package Import 機能を介してリモートコード実行 RCE を達成できます。 📌 元のアドバイザリ: GitH...

CVE-2020-25265-25266

CVE-2020-25265 / CVE-2020-25266 CVE-2020-25265 CVE-2020-25266 Este es un exploit PoC de libappimage y appimaged. Usando una combinación de los dos CVE, se puede crear un archivo que no parece ser un appimage, que es recogido implícitamente por appimaged e instalado, sobrescribiendo una versión...

MongoDeepDive

🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Exploit CVE-2025-14847 Advanced Heuristics Analyzer for Red Team Operations 💀 Overview MongoDeepDive is a high-performance, asynchronous vulnerability scanner and forensic analyzer designed to detect uninitialized memory leaks in MongoDB servers...

CVE-2021-3560_Polkit

CVE-2021-3560 Polkit ローカル権限昇格 root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ Linux システム上の PolicyKit Polkit に影響を与える CVE-2021-3560 脆弱性の自動エクスプロイトです。 ⚠️...

CVE-2025-55182-PoC-exploit

CVE-2025-55182-PoC-exploit Next.js RCE（React Server Functions経由） root@kitploit: ❯ python3 cve-2025-55182-exploit.py 0:"a":"$@1","f":"","b":"3OmR5Ifk9dmFJ1coB7-Wc" 1:E"digest":"uid=0root gid=0root groups=0root,0root,1bin,2daemon,3sys,4adm,6disk,10wheel,11floppy,20dialout,26tape,27video"...

cve-2017-7117

cve-2017-7117 About the Bug A type-confusion and UAF found in iOS 10.3.4 and earlier, Safari before 11.0. CVE-2017-7117: mitre.org Original Proof of Concept Discovered by @lokihardt, source: Google Project Zero root@kitploit: function f let o = ; for let i in xx: 0 // i is a String for i of 0 // ...

CVE-2026-84287

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-73775

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...

CVE-2026-73778

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...

CVE-2026-73781

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73771

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources...