AfterLogic Aurora and WebMail Pro < 7.7.9 - Information Disclosure

AfterLogic Aurora and WebMail Pro products with 7.7.9 and all lower versions are affected by this vulnerability, simply sending an HTTP GET request to WebDAV EndPoint with built-in “caldavpublicuser@localhost” and it’s the predefined password “caldavpublicuser” allows the attacker to read all fil...

bonesi

BoNeSi BoNeSi , the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. What traffic can be generated? BoNeSi generates ICMP, UDP and TCP HTTP flooding attacks from a defined botnet size different IP...

CVE-2002-0201

CVE-2002-0201 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. Exploit-db publication at https://www.exploit-db.com/exploits/21237/ Securityfocus...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read Affected versions: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Default plugins list root@kitploit: alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge...

CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wrapper for sqlmap designed to exploit CVE-2024-51428 in ZoneMinder. This tool automates detection and exploitation of a Blind SQL Injection vulnerability while keeping the output clean and focused on useful data. The script hides sqlmap...

CVE-2018-11776

CVE-2018-11776 CVE-2018-11776 भेद्यता की जाँच जो हमलावरों को दूरस्थ रूप से कोड निष्पादित करने और Apache Struts-आधारित अनुप्रयोगों पर नियंत्रण पाने की अनुमति देती है। स्थापित करें और शोषण करें https://github.com/hook-s3c/CVE-2018-11776-Python-PoC Suricata फ़ाइल "test.rules " में Suricata उपयोगिता ...

CVE-2023-23752

CVE-2023-23752 joomla CVE-2023-23752 स्कैनर के लिए सरल प्रोग्राम, यह एक सरल Ruby स्क्रिप्ट है जो जाँचती है कि क्या लक्ष्यों की सूची CVE-2023-23752 के प्रति संवेदनशील है, जो किसी वेब एप्लिकेशन में एक गंभीर सुरक्षा भेद्यता है। स्क्रिप्ट निर्दिष्ट एंडपॉइंट पर एक HTTP GET अनुरोध भेजती है, और...

CVE-2019-18655

CVE-2019-18655 metasploit module. SEH based buffer overflow in file sharing wizard app v.1.5.0. CVE summary: File Sharing Wizard version 1.5.0 is affected of Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution a...

CVE-2024-10511

CVE-2024-10511 CWE-287: Improper Authentication Summary Schneider Electric PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and workstations PowerChute Serial Shutdown v1.2.0.301 and prior...

CVE-2025-24893-PoC

CVE-2025-24893 – XWiki Remote Command Execution Proof of Concept Overview This repository contains a controlled Proof of Concept PoC for CVE-2025-24893 , an unauthenticated Remote Command Execution RCE vulnerability affecting XWiki. The vulnerability allows an attacker to execute arbitrary...

Http-Asynchronous-Reverse-Shell

Shell inversa asíncrona HTTP/S ✨ Introducción En una era donde sistemas de detección avanzados como IDS, IPS, EDR, AV y firewalls dominan las redes corporativas, evadirlos durante evaluaciones ofensivas de seguridad es un desafío. La mayoría de las shells inversas aprovechan túneles TCP capa 4, q...

EUVD-2026-70518

A cross-site request forgery CSRF vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed a state-changing and irreversible operation while accepting HTTP GET requests. Because bodyless GET requests are not subject to CakePHP's CSRF validation, an attacker could cause ...

cve-2026-1731-scanner

CVE-2026-1731 — BeyondTrust RS/PRA Passive Vulnerability Scanner root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ CVE-2026-1731 ║ ║ BeyondTrust RS/PRA Passive Vulnerability Scanner ║ ║ ║ ╠═══════════════════════════════════════════════════════════════╣ ║...

S2-046_S2-045_POC

S2-046POC Usage: root@kitploit: ./s2046.sh url ./s2045.sh url Sample: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action OUTPUT: root@kitploit: ================HTTP GET Method================ uid=0root gid=0root groups=0root...

CVE-2024-3273-EXPLOIT

CVE-2024-3273 - D-Link Remote Code Execution RCE 💥 A critical vulnerability, classified as CVE-2024-3273, was discovered in several D-Link NAS devices, including DNS-320L, DNS-325, DNS-327L, and DNS-340L, up to the date of 20240403. This vulnerability affects an unknown function of the file...

CVE-2026-84175

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT Web of Things ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and...

Fake_CVE-2020-1350

FakeCVE-2020-1350 This is the source code for a very crude fake CVE-2020-1350 exploit tool, which developed as part of honeypot repository for the SIGRed vulnerability, with the goal of tracking/mapping interest and attempts to use exploits for this critical vulnerability. This project was...

CVE-2004-2271-MiniShare-1.4.1-BOF

CVE-2004-2271 - MiniShare 1.4.1 - BOF संदर्भ https://nvd.nist.gov/vuln/detail/CVE-2004-2271 भेद्यता MiniShare 1.4.1 में प्राप्त HTTP GET अनुरोधों पर कोई सीमा जाँच नहीं होती है। एक लंबा, खराब प्रारूपित HTTP GET अनुरोध भेजकर, एक हमलावर बफर ओवरफ्लो कर सकता है और सिस्टम पर मनमाना कोड निष्पादित कर सकत...

SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC Код для блога Veracode Чтобы продемонстрировать выполнение кода: 1. Соберите проект с помощью Maven 2. Выполните python3 -m http.server 8080, чтобы запустить HTTP-сервер 3. Запустите exploit.java. Вы должны увидеть HTTP GET-запрос на сервере 4. Чтобы показать, как...

CVE-2026-82263

Logto through 1.42.0 is affected by a server-side request forgery (SSRF) in the OIDC SSO connector creation endpoint . The root cause is a failure to validate the issuer URL parameter, allowing tenant administrators holding Management API credentials to supply arbitrary internal URLs that trigger...