Simple_CMS_SQLi

Questo repository non contiene un README...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 è un attacco a guasto controllato via software sui processori x86. È il primo attacco che corrompe l'integrità delle enclave SGX. Descrizione Tutti i processori Intel recenti dispongono di un'interfaccia software per controllare le tensioni dei core senza riavviare ...

Log4j-Rec-CVE-2021-44228

Notas de reprodução do Log4j2, apenas para aprendizado Referência: https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce Criar arquivo executável root@kitploit: com/example/template javac Log4jRCE.java Iniciar servidor HTTP do Python root@kitploit: com/example/template python -m...

CVE-2026-4246 ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all versions up to, and including, 4.10.1 due to insufficient input sanitization and output escaping. The REST endpoint at...

CVE-2026-4246

ElementsKit Pro (WordPress plugin) versions up to and including 4.10.1 are affected by an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability via the s parameter of the Advanced Search REST endpoint at /wp-json/elementskit/v1/advanced-search. The endpoint uses permission_callback set ...

CVE-2017-12611_Exploit

CVE-2017-12611-Projekt Übersicht: Ein RCE-Angriff ist mit dem angegebenen Payload möglich. Umgebung & Werkzeuge Nachfolgend sind die Umgebungen und Werkzeuge für Tests und Validierung in einem isolierten, persönlichen Labor aufgeführt. Host-Betriebssystem : Ubuntu 18.04.6 Angreifer-Betriebssystem...

cupshax

CUPSHax Schneller Proof of Concept für den aktuellen CUPS-Exploit. Ich hatte vor, das Ganze noch viel mehr aufzuräumen, aber die Embargo-Frist wurde viel früher aufgehoben als erwartet, daher ist der Code etwas überstürzt. Für alle technischen Details solltest du ehrlich gesagt einfach Evilsocket...

CVE-2024-36039_PoC

CVE-2024-36039: Iniezione di Oggetti PyMySQL a SQL Injection PoC Un laboratorio Proof of Concept PoC completo e riproducibile per CVE-2024-36039 , che dimostra come una vulnerabilità di Object Injection in PyMySQL versioni = 1.1.0 possa essere elevata a una SQL Injection completa utilizzando le...

magnolia-rce

Titolo Exploit: Magnolia DX Core 6.3.8 - Iniezione di comandi Data: 05/16/2025 Autore Exploit: tmrswrr Versione: 6.3.8 Home page del fornitore: https://docs.magnolia-cms.com/home/ Prodotto: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Autenticat...

CVE-2021-40303

CVE-2021-40303 perfex crm 1.10 è vulnerabile a Cross Site Scripting XSS memorizzato tramite /clients/profile. poc: root@kitploit: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

Magento-ver.-2.4.6

Titolo Exploit: FireBear Studio Improved Import & Export ver. 3.8.6 per Magento 2.4.6 - Iniezione XSLT lato server Data: 2023-11-17 Autore dell'exploit: tmrswrr Homepage del fornitore: FireBear Studio Link al software: FireBear Studio Improved Import & Export Versione: FireBear Improved Import &...

cve-2024-32651

cve-2024-32651 changedetection RCE durch SSTI...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Nicht authentifizierte SQL-Injection Beschreibung Das Navayan-CSV-Export-Plugin für WordPress ist in Versionen bis einschließlich 1.0.9 anfällig für SQL-Injection, da der vom Benutzer bereitgestellte Parameter unzureichend maskiert wird und die bestehen...

Gallery-Plugin-SQL-Injection

Titolo Exploit: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Data: 2024-07-05 Autore Exploit: tmrswrr Categoria : Webapps Homepage del vendor: https://total-soft.com/wp-video-gallery/ Versione 2.3.6 1. Accedi al pannello di amministrazione: Vai al pannello di...

CVE-2024-3400-pot

CVE-2024-3400-pot Semplice honeypot per la vulnerabilità di iniezione di comandi CVE-2024-3400 Palo Alto PAN-OS. Funzionalità Simula la visita della pagina /global-protect/login.esp pagina di login del portale GlobalProtect Simula la richiesta HTTP POST /ssl-vpn/hipreport.esp e Cookie:...

CVE-2023-29809

Exploit Title: Unauthenticated SQL injection Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29809 Descrizione: La vulnerabilit...

CVE-2026-82082

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-76053

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser in all versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This mak...

CVE-2022-21661

CVE-2022-21661 1. Introduzione WordPress v4.1v5.8.2 WPQuery SQL Injection POC 2. Utilizzo root@kitploit: poc -h 192.168.1.1 // scansione singola poc -f host.txt // scansione batch 3. Dichiarazione di non responsabilità Questo strumento è destinato esclusivamente a scopo di apprendimento, ricerca...