CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

Awesome-Red-Teaming

This List is no longer updated. Awesome Red Teaming List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point. Anyway, this is a living resources and will update regularly with latest Adversarial Tactics and...

CVE-2021-3493_CVE-2022-3357

NOTE 1. This is a GitHub repository containing source code and research information about 2 CVEs: CVE-2021-3493 and CVE-2022-3357, respectively a CVE allowing privilege escalation and a CVE allowing RCE intrusion. If we combine these two CVEs, we can infiltrate a WordPress server and if that serv...

CVE-2026-86666

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function uploadjson/uploadFile of the file controllers/pic.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Fixed Version Description This is an exploit for the Apache HTTP Server 2.4.49 vulnerability identified as CVE-2021-41773. The original version of the exploit published on Exploit-DB contained syntax and execution...

mikrotik-beast

Mikrotik Beast tool Mass MikroTik WinBox Exploitation tool, CVE-2018-14847 This tool allows you to scan a range of network hosts CIDR against the CVE-2018-14847 winbox exploit. Usage $ python3 mikrotikbeast.py Accepted input examples Example 1: '192.168.5.0/24' Example 2: '172.16.0.0/16' NOTES:...

Cisco-CVE-2025-20281-illdeed

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...

CVE-2021-3560

CVE-2021-3560 PolKit Race Condition Local Privilege Escalation Analysis toc Vulnerability Overview Vulnerability ID: CVE-2021-3560 Vulnerability Score: Vulnerable Product: Linux PolKit polkitd Affected Versions: Introduced in source code 0.113;...

CVE-2020-11444

CVE-2020-11444 Nexus 3 Unauthorized Access Exploit Script For more exploit scripts, see: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub...

netgear-pwnagent

PwnAgent This is the PoC for CVE-2023-24749, aka PwnAgent, a One-Click WAN-side RCE in Netgear RAX Routers. You can trigget this exploit by visiting http://pwn.mahaloz.re. Explanation Please visit the blog which explains this here...

CVE-2022-26134-Exploit-Detection

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requisites 1. ClamAV Clone this repository or download the Yara rule on your confluence server We are using the Yara rule provided by volexity/threat-intel who first unveiled this vulnerability. Git Clone root@kitploit: git clone...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit La dirección de system y el gadget deben ser reemplazados por la dirección real encontrada mediante una vulnerabilidad de divulgación de información. Después de reemplazar la dirección de system y el gadget. Ejecuta el código para generar el archivo GIF corrupto:...

cacti-rce-snmp-options-vulnerable-application

Cacti v1.2.24 authenticated command injection CVE-2023-39362 vulnerable application This is a vulnerable application to test the exploit for the Cacti vulnerability CVE-2023-39362. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended usin...

cacti-rce-snmp-options-vulnerable-application

Cacti v1.2.24 inyección de comandos autenticada CVE-2023-39362 aplicación vulnerable Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2023-39362. ¡ADVERTENCIA! ¡Esta aplicación contiene vulnerabilidades de seguridad graves. Úsela bajo su propio riesgo! Se...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131Unsafe Session Storage 0x00 Preface Zabbix vulnerability CVE-2022-23131, I accidentally obtained a Zabbix server of a foreign company. Zabbix Sia Zabbix is an open-source monitoring system developed by Zabbix SIA Zabbix Sia from Latvia. This system supports network...

fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier URI without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the...

CVE-2021-2394

CVE-2021-2394 POC of CVE-2021-2394 Disclaimer This project is for learning purposes only. Any direct or indirect consequences and losses caused by unauthorized testing shall be borne by the user. Notes The POC sends packets using IIOP. Please add relevant dependencies dependencies for version...

CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...