527083 matches found
CVE-2024-21514
CVE-2024-21514 PoC y EscΓ‘ner Masivo Resumen POC para CVE-2024-21514 : Se identificΓ³ un problema de inyecciΓ³n SQL en la extensiΓ³n de pago Divido para OpenCart, que estΓ‘ incluida por defecto en la versiΓ³n 3.0.3.9 Este POC fue creado por M Ali y estΓ‘ basado en este Aviso de Seguridad de Snyk. CΓ³mo...
SQLPad-RCE-Exploit-CVE-2022-0944
How It Works: This PHP code is designed to exploit a Remote Code Execution RCE vulnerability in SQLPad , related to CVE-2022-0944. It works by injecting malicious code into the SQLPad application, forcing it to execute a system command that opens a reverse shell β a connection that grants the...
CVE-2020-9758
CVE-2020-9758 Description An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from...
CVE-2024-53376
CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is required to firstly login to the webpanel. Tested With CyberPanel 2.3.7 Technical details An attacker can...
CVE-2024-29973
CVE-2024-29973 PoC and Bulk Scanner Overview This is a proof-of-concept PoC and bulk scanner for CVE-2024-29973: Command injection vulnerability in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14. Version 1.0.2 root@kitploit: - Fixed the paylo...
CVE-2025-57529
CPAS-bug CPAS audit management information system has SQL injection vulnerability Beijing YouDataSum Technology Co., Ltd. domain: http://youdatasum.com info root@kitploit: CVE-ID: CVE-2025-57529 affected version: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum...
CVE-2019-10708
...
CVE-2024-2997
CVE-2024-2997 Scanner Overview CVE-2024-2997 Scanner is an advanced vulnerability scanner designed to detect the command injection vulnerability in web applications. This tool helps security professionals identify potential security risks in their applications. Disclaimer This tool is for...
GenCrushSSTIExploit
EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...
MalwareForge---Advanced-Static-Malware-Analyzer
π‘οΈ MalwareForge - Advanced Static Malware Analyzer MalwareForge is a powerful static malware analysis tool that detects malicious behavior without executing the file. β¨ Features π¦ Behavior Analysis : Process Injection, Persistence, Network, Stealer, Evasion π 8 Injection Techniques : Process...
CVE-2023-33538-msf
CVE-2023-33538 β TP-Link TL-WR940N/841N Command Injection Metasploit module This Metasploit auxiliary module targets an authenticated command injection vulnerability in TP-Link TL-WR940N V2/V4 and TL-WR841N V8/V10 routers. The issue lies in the vulnerable ssid1 parameter used in WlanNetworkRpm.ht...
CVE-2025-5287
CVE-2025-5287 PoC Unauthenticated SQL Injection exploit for WordPress Likes and Dislikes Plugin β€ 1.0.0 π Description This Python script is a proof-of-concept PoC exploit for CVE-2025-5287 , targeting a vulnerability in the WordPress Likes and Dislikes Plugin β€ 1.0.0. The vulnerability allows...
CVE-2021-35042
CVE-2021-35042 SQL injection via QuerySet.orderby untrusted input Setup: Start the instances using: docker-compose up Now open the following URL to load sample data: http://localhost:8000/vulapp/setup Then go to the vulnerable page at: http://localhost:8000/vulapp/ Exploit the parameter at:...
CVE-2023-46998
Cross Site Scripting in Bootbox.js v.3.2 thru 6.0 allows a remote attacker to to inject HTML code and execute arbitrary JavaScript. Summary Vendor: BootBox Product: bootbox.js Affected versions: 3.2 to 6.0 CodeName: Venga-Que-Si-Es-Pa-Eso Vulnerability Type: Improper Neutralization of Input Durin...
CVE-2021-42663
CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 2.3.0. An attacker can leverage this vulnerability...
spring-cve-2022-22947
spring-cve-2022-22947 Spring cloud gateway code injection : CVE-2022-22947...
CVE-2024-23692
CVE-2024-23692 BURP POC root@kitploit: GET /?n=%0A&cmd=ipconfig+/all&search=%25xxx%25url:%password%.exec|.?cmd.|timeout=15|out=abc..?n..?n.RESULT:.?n..^abc.====.?n. HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept:...
CVE-2025-22777
CVE-2025-22777 GiveWP β Donation Plugin and Fundraising Platform = 3.19.3 - Unauthenticated PHP Object Injection Description The GiveWP β Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.3 via...
CVE-2022-37204
CVE-2022-37204 CVE-2022-37204 POC Suggested description RESERVED JFinal CMS 5.1.0 is vulnerable to SQL Injection. Additional Information https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Vulnerability Type SQL Injection Vendor of Product the development group...
CVE-2024-37843-POC
CVE-2024-37843-POC PoC para CVE-2024-37843. InyecciΓ³n SQL ciega basada en tiempo en Craft CMS Detalles disponibles en blog PoC root@kitploit: curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \ \n \n LIMIT 5 AS...