CVE-2022-46196

CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

Windows-CVE-2024-38063

Windows CVE-2024-38063 ID de CVE: CVE-2024-38063 Puntuación CVSS 3.1: 9.8 Crítico Puntuación EPSS: Baja - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impacto: Ejecución Remota de Código Componentes Afectados: Pila TCP/IP de Windows Vector de Ataque: Red Remoto...

CVE-2025-32429

CVE-2025-32429 – SQL Injection in PHP PDO Prepared Statements This repository contains a proof-of-concept exploit for CVE-2025-32429 , a vulnerability affecting PHP PDO prepared statements when emulation is enabled. 📄 References Original research by Assetnote:...

cve-2021-21985_exp

cve-2021-21985 exploit 0x01 Vulnerability Point Analysis available at: https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=homerapid7-analysis 0x02 exploit Reconstruct the beans object to achieve RCE. Bean list: root@kitploit: localizedMessageBundle vsanWorkerThreadFactory...

CVE-2020-13942

CVE-2020-13942 Apache Unomi pre-auth RCE CVE-2020-13942 exploit POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json Content-Length: 200...

webminscan

Webminscan Webmin Exploit Scanner CVE-2020-35606 CVE-2019-12840...

openCRX-CVE-2020-7378

openCRX-CVE-2020-7378 Unauthenticated Account Take Over Exploits Password Reset Vulnerability in OpenCRX, CVE-2020-7378. A Stealthy Python Implentation for CVE-2020-7378 Exploit is because, the developers used Random Class from java.util.Random to generate random tokens in order to reset a users...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: root@kitploit: docke...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

CVE-2025-51867

CVE-2025-51867 Vulnerability description Deepfiction AI is an AI entertainment company with a mission to revolutionize personalized storytelling. Deepfiction AI provide a web application to create stories by chatting with LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its ch...

CVE-2023-28252

Since February 2022 was reported a new ransomware that appears to be using a Windows 0-day vulnerability, according to the research conducted by Trend Micro. More information about this ransomware can be found at this link. According to analysis by Kaspersky, the Nokoyawa ransomware group has use...

CVE-2024-23745

CVE-2024-23745 In Notion Web Clipper 1.0.37, a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to execute arbitrary commands. Additionally, even if a NIB file is modified within an application, Gatekeeper may still permit the execution of the application, enabling t...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...

CVE-2022-46169

Cacti v1.2.22: Unauthenticated Command Injection Vulnerability CVE-2022-46169 Based on ariyaadinatha PoC exploit for CVE-2022-46169...

CVE-2021-3899_PoC

CVE-2021-3899 PoC Reproduce 0. Install an older version of apport: sudo apt-get install apport=2.20.11-0ubuntu27 any version apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0 But this pid could be re-used just after apport launched. In such case,...

incomplete-exploit-for-CVE-2018-4150-bpf-filter-poc-

This repository does not have a README...

cve-2023-46813-poc

CVE-2023-46813 PoC 1. Apply the patches in the host-patches folder to the Linux host and QEMU. 2. Start an SEV-SNP VM. 3. Run the code in this repo and wait for the message "waiting for the hypervisor to change memory to MMIO". 4. Spam the attack command in QEMU several times. 5. Once the exploit...

CVE-2025-52078

🚨 CVE-2025-52078 - Unauthenticated Arbitrary File Upload - Writebot SaaS React Template This repository contains a proof-of-concept exploit for an Unauthenticated Arbitrary File Upload vulnerability found in the Writebot – AI Content Generator SaaS React Template. 🧠 Product Page: ThemeForest –...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...