CVE-2022-42889-PoC

CVE-2022-42889 PoC This is Proof of Concept for the vulnerability CVE-2022-42889. This code will run the JavaScript code 195 + 324. If vulnerable the output should be: root@kitploit: PoC Output: 519 In order to run this you will need: JDK 11 or above Maven When prompted for an exploit string, you...

BadBlue

BadBlue Windows CVE-2024-21306 BadBlue-Implementierung mit DuckyScript Unauthentifiziertes Peering, das zur Codeausführung führt mit HID-Tastatur Dies ist eine Implementierung der von marcnewlin entdeckten CVE Und ein Teil des Codes von BlueDucky Einleitung BadBlue ist ein leistungsstarkes Tool z...

CVE-2018-25031

POC von Cross-Site Scripting im Swagger UI: CVE-2018-25031 mit Selenium in Python Dieses Repository enthält ein Python-Skript, das eine Proof-of-Concept POC einer Cross-Site-Scripting XSS-Schwachstelle im Swagger UI mithilfe der Selenium-Bibliothek demonstriert. Das Ziel dieser POC ist es, Websit...

CVE-2025-54123

CVE-2025-54123 - Hoverfly-Befehlsinjektion RCE PoC CVE-2025-54123 - Middleware-Befehlsinjektion in Hoverfly 📌 CVE-Details ID : CVE-2025-54123 Typ : Befehlsinjektion / Remote-Code-Ausführung RCE Anbieter : Hoverfly Auswirkungen : Erlaubt authentifizierten Angreifern, beliebige Systembefehle über d...

CVE-2018-6574

CVE-2018-6574 POC Exploit-POC für CVE-2018-6574 Kompilieren 1. Erstelle eine Exploit-Datei mit folgendem Inhalt: root@kitploit: include include static void malicious attributeconstructor; void malicious system"COMMAND"; 2. Kompiliere sie: root@kitploit: gcc -shared -o exploit.so -fPIC exploit.c 3...

CVE-2026-55993

camel-atmosphere-websocket - Reproducteur d'injection d'en-tête CVE-2026-55993 Ce projet démontre une injection d'en-tête de message dans le composant camel-atmosphere-websocket d'Apache Camel, référencé sous CVE-2026-55993. Le consommateur WebSocket copie les paramètres de requête de la connexio...

Blinder

Blinder Blidner 是一个小型 Python 库，用于自动化基于时间的盲 SQL 注入，通过使用预定义的查询作为函数来快速开发 PoC。 安装 您可以通过以下命令安装 Blinder： pip install blinder 或者下载源码并手动导入到您的项目中。 用法 要使用 Blinder，您需要导入 Blinder 模块，然后开始使用 Blinder 的主要函数。 您可以使用当前版本的 Blinder 执行以下操作： 检查基于时间的注入。 获取数据库名称。 获取表名称。 您可以使用以下代码检查 URL 是否存在注入： root@kitploit:...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Injection d'en-tête Host menant à un contournement de l'authentification SAML dans AWS Auth Manager d'Apache Airflow Un attaquant peut injecter un en-tête Host malveillant dans le flux de connexion SAML, ce qui entraîne le pointage de l'URL du service de consommation d'assertio...

CVE-2022-22963

CVE-2022-22963 - Spring4shell 要运行有漏洞的SpringBoot应用程序，请运行这个docker容器，并将其暴露在8080端口。 示例： root@kitploit: docker run -it -d -p 8080:8080 bobcheat/springboot-public 漏洞利用 Curl命令： root@kitploit: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

CVE-2023-23279

Canteen Management System v1.0의 SQL 삽입 취약점. 버그 작성자: Tuannq 발견일: 2023년 5월 1일 벤더: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html 로그인 계정: [email protected]/rootadmin 슈퍼 관리자 계정 취약점 파일: /phpaction/getOrderReport.php 취약점 위치:...

CVE-2025-46181-XSS

CVE-2025-46181 - 온라인 예약 시스템에서 발견된 반사형 XSSReflected XSS CVE-ID : CVE-2025-46181 발견자 : Shemkumar P shemkumar.github.io 취약점 유형 : 반사형 교차 사이트 스크립팅Reflected XSS 심각도 : 중간Medium 상태 : 공개됨, MITRE에서 CVE 지정 ✨ 설명 공개 온라인 예약 시스템v1.0의 예약 확인confirmation을 처리하는 페이지에서 반사형 교차 사이트 스크립팅Reflected XSS 취약점이 발견되었습니다. GET...

CVE-2024-48990-PoC

Este script de shell simples deve criar todos os arquivos necessários para que esta vulnerabilidade funcione. Primeiro, ele cria um arquivo temporário gerado aleatoriamente que será usado para compilar o falso arquivo init.so. Quando a vulnerabilidade é acionada, este arquivo executará e copiará ...

CVE-2024-4577

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Descrição Nas versões do PHP 8.1. anteriores a 8.1.29, 8.2. anteriores a 8.2.20 e 8.3. anteriores a 8.3.8, ao usar Apache e PHP-CGI no Windows, se o sistema estiver configurado para usar certas páginas de código, o Windows pode usar o comportamento...

CVE-2019-17137

CVE-2019-17137 Informações CVE: https://vulners.com/cve/CVE-2019-17137 POC root@kitploit: GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - Vulnerabilidade de Injeção SQL no OpenEMR 8.0.0 Fraqueza CWE-89 Neutralização Incorreta de Elementos Especiais usados em um Comando SQL 'Injeção SQL' O produto constrói todo ou parte de um comando SQL usando entrada influenciada externamente de um componente upstream, mas não...

CVE-2023-46805

Scanner CVE-2023-46805 Scanner CVE-2023-46805 para dispositivos Ivanti Connect Secure possivelmente vulneráveis por país usando Shodan. Versão do script: 1.3 Atualizado com a recente postagem no blog feita por Assetnote ⚠️ Este script é para fins defensivos e deve ser usado por profissionais de...

CVE-2023-40931-PoC

CVE-2023-40931 O payload sqlmap para explorar o CVE-2023-40931 Payload Informações necessárias: Nome de usuário e senha válidos Domínio e caminho da instância hospedada root@kitploit: sqlmap -D nagiosxi -T xiusers -u...

CVE-2023-38743

CVE-2023-38743 Injeção de Comandos no ManageEngine ADManager Ref: https://medium.com/@petrusviet/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe https://www.zerodayinitiative.com/advisories/ZDI-23-1488/...

CVE-2023-29007

CVE-2023-29007 Repositorio PoC para CVE-2023-29007 Más información disponible en: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...

cpanel-cve-2026-41940-ioc

CVE-2026-41940 IOC Scanner Detection script for the cPanel/WHM authentication bypass CVE-2026-41940 affecting all cPanel versions after 11.40. This is a rewrite of the upstream cPanel detection script with fixes for false positives and added log correlation. What it does Scans...