Nostromo_Python3

Nostrom RCE Python3 Exploit Code: Usage: root@kitploit: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 から 6.15 まで、リモートコード実行が可能です 認証されたリモートの低権限ユーザーが、実行可能なPHPファイルをアップロードし、システムコマンドを実行できます。 脆弱性はメッセージ機能にあり、送信されるファイル（例：shell.jpg.php.shell）の検証が不十分であることが原因です。 Windows Server 2019 x64 でテスト済み 使用方法: python CVE-2023-33253 -t 127.0.0.1 -u user -p user PoC:...

Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. ログインページに移動 2. 新しいアカウントを登録し、パスワードを P@$$w0rd!1234 に設定 3. スクリプトを実行 -u = 低権限ユーザーのメールアドレス 2FAなし -a = 管理者のメールアドレス -t = URL 例: http://rocketchat.local python3 rocketchat.py -u [email protected] -a [email protected] -t http://192.168.169.164:3000 4...

CVE-2024-22120-RCE

CVE-2024-22120 ToolKit Affected Version/s root@kitploit: 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Credit https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premise a low-privilege user Have...

CVE-2026-72524

CVE-2026-72524 is an Incorrect Authorization vulnerability in Apache Doris that allows an authenticated low-privilege user to bypass privilege checks and read, write, or drop arbitrary tables . The affected versions are 3.1.0 through 3.1.*, 4.0.0 through 4.0.7, and 4.1.0 through 4.1.3. The vulner...

CVE-2026-72524 Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables

Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access or modify data they are not authorized to. This issue affects Apache Doris: from 3.1.0 through 3.1., from 4.0.0 through 4.0.7, and from 4.1.0 through 4.1.3. Users are recommend...

CVE-2023-29343

CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...

CVE-2025-65271

CVE-2025-65271 PoC for CVE-2025-65271 How to run? node server.js Description Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard...

CVE-2023-32707

CVE-2023-32707 Un exploit POC mejorado basado en el CVE reportado en exploitdb Título del Exploit: Splunk 9.0.5 - Toma de Control de Cuenta de Administrador CVE: CVE-2023-32707 Resumen Este script permite explotar una vulnerabilidad en Splunk 9.0.5, que lleva a la toma de control de una cuenta de...

CVE-2021-40375

CVE-2021-40375 - OpenEyes 3.5.1 におけるアクセス制御の欠陥 説明 Apperta Foundation によって開発された OpenEyes 3.5.1 に、不適切なアクセス制御の脆弱性が確認されました。...

CVE-2024-56071

🚨 Simple Dashboard = 2.0 - 未认证权限提升 📄 描述 WordPress 的 Simple Dashboard 插件在所有版本中（包括 2.0 及以下版本）存在权限提升漏洞。 这使得未认证的攻击者可以将其权限提升至管理员级别。 CVE: CVE-2024-56071 CVSS: 9.8（严重） 🛠️ 利用逻辑 尽管该漏洞是由于缺少能力检查（没有使用 currentusercan），但 WordPress 核心保护/wp-admin/ 不被未认证访问。 ➡️ 这意味着该漏洞仅在登录后可以利用 ，但用户不需要任何特殊权限 。 即使是订阅者 也可以利用此漏洞并更改关键的...

Linux Distros Unpatched Vulnerability : CVE-2026-54258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated...

privilege-escalation-breach

Security breach project - Privilege escalation The vulnerability is in Oracle Solaris, a product of Oracle Systems component: XScreenSaver. The supported version that is affected is 11. It's an easily exploitable vulnerability which allows low privileged attackers with logon to the infrastructure...

CVE-2026-4129 Improper Access Controls in NI SystemLink

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior...

CVE-2026-85545

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access...

CVE-2026-85545

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access...

EUVD-2026-75401

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access...

CVE-2026-52771

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage interpolates a page tag retrieved from the database into a DELETE FROM …links WHERE totag = '$tag' query without escaping. The page tag is attacker-controlled — the POST /api/pages/tag A...

EUVD-2026-71447

Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V60005 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution...

CVE-2026-78599

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of internal resources via Path Traversal CAPEC-126. A low-privileged user holding Fleet write access could cause a subsequent administrative delete...