Lucene search
+L

1069 matches found

Kitploit
Kitploit
•added 2026/09/25 2:01 p.m.•13 views

CVE-2024-23692-RCE-in-Rejetto-HFS

Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...

9.8CVSS9.3AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/25 11:16 a.m.•15 views

CVE-2024-23692

CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...

9.8CVSS8.5AI score0.99485EPSS
SaveExploits21References1
Kitploit
Kitploit
•added 2026/09/25 9:43 a.m.•10 views

CVE-2016-2334

Exploiting CVE-2016-2334 7zip HFS+ vulnerability hfsGenerator.py Script used to generate HFS+ file heap.js WinDbg js script. After loading script, setup allocation hook in the following way: bp ntdll!RtlAllocateHeap "pt "dx Debugger.State.Scripts.heap.Contents.handleRtlHeapAlloc;g"" Next you can...

9.3CVSS7.7AI score0.14742EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/25 8:20 a.m.•11 views

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution CVE-2014-6287 Rewrite of Pergyz 49584.py to return an x64 PowerShell Reverse Shell Usage $ python3 hfs-2-3-exploit.py Supply variables when prompted, auto starts Netcat for you...

10CVSS8.4AI score0.99323EPSS
SaveExploits23
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•227 views

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

9.8CVSS8.8AI score0.99485EPSS
SaveExploits21References2
Kitploit
Kitploit
•added 2026/09/24 11:31 p.m.•10 views

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...

10CVSS8.3AI score0.99323EPSS
SaveExploits23References1
Kitploit
Kitploit
•added 2026/09/24 10:04 p.m.•11 views

CVE-2024-23692

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 Overview POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticat...

9.8CVSS9.4AI score0.99485EPSS
SaveExploits21References1
Kitploit
Kitploit
•added 2026/09/24 3:58 p.m.•14 views

netbsd_hfs

NetBSD hfs local overflow Bug details: root@kitploit: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the siz...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 2:58 p.m.•8 views

HFS2.3_poc

HFS2.3poc HFS2.3 Unauthenticated Remote Code Execution CVE-2024-23692 python HFS2.3poc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage:...

9.8CVSS8.9AI score0.99485EPSS
SaveExploits21
EUVD
EUVD
•added 2026/09/24 1:32 p.m.•6 views

EUVD-2026-85880

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro...

10CVSS6.1AI score0.00317EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 1:01 p.m.•10 views

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

9.8CVSS9.1AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/24 6:29 a.m.•15 views

Rejetto-HFS-2.x-RCE-CVE-2024-23692

An unauth SSTI in the Rejetto HTTP File Server HFS. Original finder PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Tested against versions: 2.4.0 RC7, 2.3m Example usage: root@kitploit: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured,...

9.8CVSS8.6AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/23 12:43 a.m.•10 views

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

10CVSS9AI score0.99323EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/22 10:10 a.m.•13 views

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE on HFS 2.3 - CVE-2014-62 šŸ”– Title of the Project root@kitploit: Remote Code Execution via HTTP File Server HFS 2.3 āš™ Tools Used • Kali Linux • Nmap • Metasploit • Target: HFS 2.3 on Windows 7 šŸ” Vulnerability Details • Name: CVE-2014-6287 • Type: Remote Code Executi...

10CVSS8.5AI score0.99323EPSS
SaveExploits23
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002120 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

7.5CVSS6.3AI score0.01171EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-001071)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001071 advisory. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0...

9.8CVSS8.9AI score0.29314EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/21 6:49 p.m.•9 views

Node.js-CVE-2024-39943

Node.js HFS Command Execution Vulnerability CVE-2024-39943 White Hat School 3rd – Jeongmin Noh @JenmrR Summary In a Node.js-based HFS server environment, there is a vulnerability where the content of an uploaded file is executed via childprocess.execSync. An attacker can directly execute OS...

9.9CVSS8.6AI score0.39474EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/21 4:31 p.m.•10 views

CVE-2024-23692-exp

CVE-2024-23692-exp CVE-2024-23692 exp HFS 2.4 RC7...

9.8CVSS8.7AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/21 1:14 p.m.•9 views

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS Server RCE FOFA "HttpFileServer" Notes Affected range: HFS 2.3 and below Usage How To Use ulimit -n 999999; zmap -p PORT -B500M | go...

9.8CVSS8.7AI score0.99485EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/21 7:17 a.m.•17 views

CVE-2024-23692

Rejetto HFS HTTP File Server CVE-2024-23692 Vulnerability Overview Rejetto HFS HTTP File Server is a simple web file server that facilitates file sharing over a network or the internet. Despite its ease of use and simplicity, a critical vulnerability CVE-2024-23692 has been discovered, making the...

9.8CVSS8.9AI score0.99485EPSS
SaveExploits21
Rows per page
Query Builder