zaphoxx-coldfusion

zaphoxx-coldfusion exploit de coldfusion basado en https://cvedetails.com/cve/CVE-2009-2265/ La razón principal por la que configuré un script en Python para este CVE en particular fue que la versión de Metasploit del mismo no me funcionó cuando intenté resolver la máquina Arctic de HTB. También...

CVE-2026-39987.py

CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. HOW TO USE : The only change it has to be made is to the change the HOST variable in the script. After changing the HOST variable execute the script in your Terminal like the...

CVE-2026-52618

CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars spawncmd0, cmd.slice1, shell: true re-joins an argument array into a single /bin/sh -c string without escaping, so a shell metacharacter in an extraVars value supplied to the executeDeployment MCP...

CVE-2026-34910-unifi-poc

UniFi OS CVE Proof of Concept Proof of concept for authorized testing of two vectors identified as: CVE-2026-34910: auth bypass that can lead to command injection and remote code execution via the package update handler. CVE-2026-34909: path traversal that can lead to arbitrary file read via the...

ghostdebug

GhostDebug GhostDebug is a Windows x64 debugger prototype composed of a native debugging DLL and a .NET Framework command-line client. It is intended for debugging targets that use debugger-detection checks. For background on the design, see Developing an undetected debugger on Windows...

[SECURITY] Fedora 44 Update: GitPython-3.1.60-1.fc44

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

[SECURITY] Fedora 44 Update: hcloud-1.67.0-1.fc44

A command-line interface for Hetzner Cloud...

CVE-2019-14745

CVE-2019-14745 Vulnerabilidad armada de radare2 CVE-2019-14745 asignado encontrada por @CaptnBanana y blenk92 Para detalles sobre la vulnerabilidad, lee https://bananamafia.dev/post/r2-pwndebian/ Uso En primer lugar, necesitas los bindings de Python de LIEF https://lief.quarkslab.com/ Luego,...

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

CVE-2020-8816

CVE-2020-8816 Un script de Python para explotar CVE-2020-8816, una vulnerabilidad de ejecución remota de código en Pi-hole. Este script utiliza las técnicas encontradas por François Renaud-Philippon para lograr la ejecución remota de código en un Pi-hole que ejecute una versión de la interfaz web...

[SECURITY] Fedora 43 Update: curl-8.15.0-9.fc43

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

[SECURITY] Fedora 43 Update: mqttcli-0.2.8-2.fc43

mqttcli provides two programs pub and sub that allow command-line access to an MQTT broker. sub subscribes to a topic and prints messages received to standard output. pub publishes the provided message to the provided topic. Both programs accept flags that can be provided as a config file...

[SECURITY] Fedora 43 Update: hcloud-1.67.0-1.fc43

A command-line interface for Hetzner Cloud...

CVE-2021-3560-Polkit-Privilege-Esclation

CVE-2021-3560-Polkit-Privilege-Esclation PoC Investigación original de Kevin Backhouse Este es solo un script PoC en Bash que automatiza los pasos de explotación mencionados en el blog de Kevin Backhouse. Lee su publicación sobre esta vulnerabilidad:...

CVE-2024-38856

CVE-2024-38856 Escáner de RCE de Apache Ofbiz Descripción Este script está diseñado para escanear la vulnerabilidad CVE-2024-38856 en aplicaciones Apache Ofbiz, lo que puede permitir la ejecución remota de código. Envía solicitudes HTTP POST a rutas específicas dentro de la aplicación Ofbiz con...

CVE-2021-3317

Información Título del Exploit: Klog Server 2.4.1 - Inyección de Comandos Autenticado Fecha: 26.01.2021 Autor del Exploit: Metin Yunus Kandemir Página del Proveedor: https://www.klogserver.com/ Versión: 2.4.1 Descripción:...

CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Ejecución Remota de Código Uso root@kitploit: usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

CVE-2017-10271

Brief Description Command execution with echo output Direct shell upload Tested OK on Linux with WebLogic 10.3.6.0 Usage python weblogicwlswsatexp.py -t 172.16.80.131:7001 root@kitploit: usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this...

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...