838034 matches found
WORDPRESS-CVE-2024-25600-EXPLOIT-RCE
WORDPRESS-CVE-2024-25600-EXPLOIT-RCE WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution RCE...
docker-cve-2021-41773
CVE-2021-41773 Una demostración para mostrar la vulnerabilidad CVE-2021-41773 en un contenedor docker. Uso Servidor ejecuta build.sh ejecuta docker build root@kitploit: ./scripts/build.sh NOTA: No es necesario hacerlo más de una vez ejecuta deploy.sh crea un contenedor docker con la imagen de...
CVE-2023-43325
mooSocial: XSS CVE-2023-43325 A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter:...
CVE-2022-46169
CVE-2022-46169 PoC: Authentication Bypass and Remote Code Execution This repository contains a PoC for the CVE-2022-46169 vulnerability, which allows an attacker to bypass authentication and execute arbitrary code remotely on the affected system. This vulnerability affects Cacti, version 1.2.22,...
CVE-2025-66849
CVE-2025-66849 Ghost CMS Privilege Escalation PoC Summary In Ghost Foundation Ghost CMS up to 6.4.0, the HTML block within the post draft editor fails to properly sanitize or encode user-supplied content, resulting in a stored cross-site scripting XSS vulnerability. A user with Contributor...
CVE-2024-0195-SpiderFlow
CVE-2024-0195 Improper Control of Generation of Code 'Code Injection' Critical 2024 Summary CVE-2024-0195 is a critical code injection vulnerability in the spider-flow 0.4.3 web application, specifically in the FunctionService.saveFunction function of the FunctionController.java file. An attacker...
CVE-2023-31705
CVE-2023-31705 description A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Sourcecodster Affected Produc...
CVE-2017-7921-EXP
CVE-2017-7921 Exploit An Improper Authentication issue was discovered in Hikvision devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system...
CVE-2017-0037
CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability This document is about CVE-2017-0037- Microsoft Browser Memory Corruption Vulnerability. It will first introduce what a Remote Code Execution RCE is and then go over through some technical specifics. What is Remote Code Execution? A...
CVE-2023-31595
CVE-2023-31595 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control via an open port IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 An exposed port 9989 responds with a live snapshot at the time of request, by using a script, it could be leveraged to have a live fe...
HFS_EXPLOIT_PROJECT
HFSEXPLOITPROJECT Metasploit RCE en HFS 2.3 - CVE-2014-62 🔖 Título del Proyecto root@kitploit: Ejecución Remota de Código a través de HTTP File Server HFS 2.3 ⚙ Herramientas Utilizadas • Kali Linux • Nmap • Metasploit • Objetivo: HFS 2.3 en Windows 7 🔐 Detalles de la Vulnerabilidad • Nombre:...
CVE-2022-0847
DirtyPipe Exploit for the DirtyPipe vulnerability written, and discovered by Max Kellermann - https://dirtypipe.cm4all.com/ POC...
CVE-2021-4034
CVE-2021-4034 Escalación de privilegios local mediante pkexec Video de YouTube Mira el ✨ Video de YouTube Ejecutar localmente root@kitploit: make all && ./pwnkit && make clean Ejecutar en Docker root@kitploit: Build the docker image docker build -t pwnkit . Run the exploit docker run -it pwnkit...
CVE-2024-4577
CVE-2024-4577 Exploit para php-cgi...
r00kie-kr00kie
r00kie-kr00kie Descargo de responsabilidad Este es un exploit PoC para la vulnerabilidad kr00k CVE-2019-15126. Este proyecto tiene únicamente fines educativos y no puede ser utilizado para violar la ley ni para beneficio personal. El autor de este proyecto no se responsabiliza por cualquier daño...
r00kie-kr00kie
r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...
CVE-2023-3452---WordPress-Canto-Plugin-RCE
CVE-2023-3452 - WordPress Canto Plugin RCE Exploit for the WordPress Canto Plugin ≤ 3.0.4 RFI vuln. Actually works on HTTPS — the other public PoCs kinda gave up on SSL. Credit where it's due: this CVE was found by others. I just made a version that doesn't break on HTTPS targets. Vulnerability...
webpwn3r
webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...
proxyshell
ProxyShell Proof of Concept Exploit for Microsoft Exchange CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 Details For background information and context, read the blog post detailing the research by Horizon3: https://www.horizon3.ai/news/blog/proxyshell Features No email address needs to be...