Lucene search
+L

1069 matches found

Kitploit
Kitploit
•added 2026/09/24 11:31 p.m.•10 views

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 Un análisis de la máquina Steel Mountain de TryHackMe.com y el exploit para CVE-2014-6287 Créditos No me atribuyo el mérito del descubrimiento y la explotación originales de esta vulnerabilidad. ¡Gracias a las siguientes personas! Descubrimiento: Daniele Linguaglos...

10CVSS8.3AI score0.99323EPSS
SaveExploits23References1
Kitploit
Kitploit
•added 2026/09/24 10:04 p.m.•11 views

CVE-2024-23692

POC - Vulnerabilidad de RCE no autenticada en Rejetto HTTP File Server - CVE-2024-23692 Resumen POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 es una vulnerabilidad crítica en Rejetto HTTP File Server HFS versión 2.3m, que permi...

9.8CVSS8.9AI score0.99485EPSS
SaveExploits21References1
Kitploit
Kitploit
•added 2026/09/24 3:58 p.m.•14 views

netbsd_hfs

Desbordamiento local de hfs en NetBSD Detalles del bug: root@kitploit: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equ...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 2:58 p.m.•8 views

HFS2.3_poc

HFS2.3poc HFS2.3未经身份验证的远程代码执行CVE-2024-23692 python HFS2.3poc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: HFS2.3poc.py -h -u URL -f...

9.8CVSS8.9AI score0.99485EPSS
SaveExploits21
EUVD
EUVD
•added 2026/09/24 1:32 p.m.•6 views

EUVD-2026-85880

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro...

10CVSS6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 1:01 p.m.•10 views

CVE-2024-23692

Rejetto HTTP File Server HFS 未授权 RCE 漏洞复现 CVE-2024-23692 简介 Rejetto HTTP File Server HFS 是一个轻量级的 HTTP 文件服务器,广泛用于文件共享和文件传输。CVE-2024-23692 漏洞是一个模板注入漏洞,允许远程、未经身份验证的攻击者通过发送特制的 HTTP 请求在受影响的系统上执行任意命令。截至 CVE 分配日期,Rejetto HFS 2.3m 不再受支持。 漏洞详情 CVE 编号 : CVE-2024-23692 漏洞类型 : 模板注入漏洞,远程代码执行 RCE 影响版本 : Rejett...

9.8CVSS8.9AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/24 11:21 a.m.•13 views

CVE-2024-23692-RCE-in-Rejetto-HFS

Rejetto HTTP文件服务器中的未认证RCE漏洞 CVE-2024-23692 - 漏洞利用代码 CVE-2024-23692 是 Rejetto HTTP文件服务器 HFS 2.3m 版本中的一个严重漏洞,允许未经认证的远程代码执行(RCE)。 该漏洞使攻击者能够在服务器上执行任意代码,带来重大安全风险。本文将介绍 Rejetto HFS、受影响的版本、漏洞的影响以及发现和修复时间线。 用法 漏洞利用脚本: root@kitploit: python3 exploit.py 示例: python3 exploit.py 192.168.130.100 80 calc 检测脚本:...

9.8CVSS8.9AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/24 9:40 a.m.•10 views

CVE-2016-2334

利用 CVE-2016-2334 7zip HFS+ 漏洞 hfsGenerator.py 用于生成 HFS+ 文件的脚本 heap.js WinDbg js 脚本。 加载脚本后,按以下方式设置分配钩子: bp ntdll!RtlAllocateHeap "pt "dx Debugger.State.Scripts.heap.Contents.handleRtlHeapAlloc;g"" 然后你可以列出堆块,并查看其中分配的对象信息: root@kitploit: 0:000 !heap -x 0x003a9bb0 Entry User Heap Segment Size PrevSiz...

9.3CVSS7.7AI score0.14742EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 7:56 a.m.•11 views

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Ejecución Remota de Comandos CVE-2014-6287 Reescritura de Pergyz 49584.py para devolver un Reverse Shell de PowerShell x64 Uso $ python3 hfs-2-3-exploit.py Proporciona las variables cuando se te solicite, inicia Netcat automáticamente por ti...

10CVSS8.4AI score0.99323EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/24 6:29 a.m.•13 views

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Un SSTI sin autenticación en el Rejetto HTTP File Server HFS. PoC del descubridor original: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Probado contra las versiones: 2.4.0 RC7, 2.3m Ejemplo de uso: root@kitploit: msf6 use exploit/windows/http/rejettohfsrcecve2024236...

9.8CVSS8.7AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/23 12:43 a.m.•10 views

CVE-2014-6287

CVE-2014-6287 - Exploit RCE para Rejetto HTTP File Server Una implementación en Rust del exploit CVE-2014-6287 dirigido a Rejetto HTTP File Server HFS versiones 2.3x anteriores a 2.3c. Resumen de la Vulnerabilidad CVE-2014-6287 es una vulnerabilidad crítica de ejecución remota de código en Rejett...

10CVSS8.4AI score0.99323EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/22 10:10 a.m.•13 views

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE en HFS 2.3 - CVE-2014-62 🔖 Título del Proyecto root@kitploit: Ejecución Remota de Código a través de HTTP File Server HFS 2.3 ⚙ Herramientas Utilizadas • Kali Linux • Nmap • Metasploit • Objetivo: HFS 2.3 en Windows 7 🔐 Detalles de la Vulnerabilidad • Nombre:...

10CVSS8.5AI score0.99323EPSS
SaveExploits23
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002120 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

7.5CVSS6.3AI score0.01171EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-001071)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001071 advisory. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0...

9.8CVSS8.9AI score0.29314EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/21 6:49 p.m.•8 views

Node.js-CVE-2024-39943

Node.js HFS 命令执行漏洞 CVE-2024-39943 白帽学校第3期 – 鲁正民 @JenmrR 摘要 在基于 Node.js 的 HFS 服务器环境中,存在一个漏洞,该漏洞会将上传文件的内容通过 childprocess.execSync 执行。 攻击者可以通过文件上传功能直接执行操作系统命令,并可查看服务器内部命令结果或控制系统。 该漏洞对应 CVE-2024-39943,会产生与命令注入(远程代码执行)同等级别的威胁。 环境配置与运行 1. 通过 Docker 环境运行服务器 2. 服务器通过 /upload 路径接收文件上传,并将上传的文件内容直接作为命令执行 3...

9.9CVSS8.6AI score0.39474EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/21 4:31 p.m.•10 views

CVE-2024-23692-exp

CVE-2024-23692-exp CVE-2024-23692 exp HFS 2.4 RC7...

9.8CVSS8.7AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/21 1:14 p.m.•9 views

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang 加入我们定时查收各类漏洞 EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS服务器 RCE FOFA "HttpFileServer" 注意事项 影响范围为 HFS2.3 及以下版本 使用方法 How To Use ulimit -n 999999; zmap -p PORT -B500M | go run hfs.go PORT CHANGE THE PORT WHICH U WANNA TO EXPLOIT TE...

9.8CVSS8.7AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/21 7:17 a.m.•17 views

CVE-2024-23692

Vulnerabilidad CVE-2024-23692 en Rejetto HFS HTTP File Server Resumen Rejetto HFS HTTP File Server es un servidor simple de archivos web que facilita el intercambio de archivos a través de una red o internet. A pesar de su facilidad de uso y simplicidad, se ha descubierto una vulnerabilidad críti...

9.8CVSS8.7AI score0.99485EPSS
SaveExploits21
Nuclei
Nuclei
•added 2026/09/21 2:08 a.m.•227 views

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

9.8CVSS8.8AI score0.99485EPSS
SaveExploits21References2
Kitploit
Kitploit
•added 2026/09/20 4:13 p.m.•11 views

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

Este repositorio no tiene un README...

10CVSS8.2AI score0.99323EPSS
SaveExploits23
Rows per page
Query Builder