CVE-2018-6574

CVE-2018-6574 Steps to reproduce: 1. Create a .c file containing the malicious command revshell: root@kitploit: include include static void malicious attributeconstructor; void malicious system""; 2. Compile it using GCC. You must compile it on the exact architecture and OS as the target e.g. Lin...

alterx

AlterX Features • Installation • Usage • Running AlterX • Join Discord root@kitploit: Fast and customizable subdomain wordlist generator using DSL. Features Fast and Customizable Automatic word enrichment Pre-defined variables Configurable Patterns Pattern Mining - Automatically discover subdomai...

Firmware_Slap

Firmware Slap Firmware Slap 将 concolic 分析与函数聚类相结合，用于固件中的漏洞发现和函数相似性分析。Firmware Slap 以一系列库的形式构建，并将大部分信息以 pickle 或 JSON 格式导出，以便与其他工具集成。 该演讲的幻灯片可在此处找到：链接 安装 Firmware Slap 应在虚拟环境中运行。已在 Python3.6 上测试通过。 root@kitploit: sudo apt install python3-virtualenv virtualenv -p python3 fwslap source...

nfsen-exploit

nfsen-exploit Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7. Tested on Ubuntu, probably works on everything Vulnerability discovered by Paul Taylor/Foregenix Ltd Usage: python exploit.py This generates a root-level shell on the remote machine...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 远程代码执行 Python脚本，用于在Nostromo nhttpd = 1.9.6中利用RCE漏洞。 帮助 root@kitploit: usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES CVE-2019-16278漏洞利用工具 - Nostromo 1.9.6 远程代码执行 可选参数： -h, --help 显示此帮助信息并退出 -t TARGET, --target TARGET 远程目标主机 -p PORT, --port PORT...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd 3.2.8.1 后门命令执行 UnrealIRCd 3.2.8.1 后门命令执行漏洞，Python 3 利用脚本（CVE-2010-2075）。 描述 UnrealIRCd 3.2.8.1 版本包含一个特洛伊木马，允许远程攻击者执行任意命令（CVE-2010-2075）。 我参考了 Metasploit 的载荷 payload/cmd/unix/reverseperl 来编写此脚本。 用法 在监听主机上启动 Netcat 监听器： root@kitploit: nc -lp 4444 执行脚本，提供以下位置参数： root@kitploit: python3...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

CVE-2024-33676

CVE-2024-33676 Weak authentication and authorization on Enel X JuiceBox Level 2 EV charger enables access to operating system functions and parameters. Description Users on the local EV charger WLAN network can extract PII, change settings, and manipulate the operating system file system. This is...

CVE-2026-73722

CVE-2026-73722 affects the web-based management interface of HPE Networking Fabric Composer . Command injection vulnerabilities allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, leading to full compromise of confidentiali...

EUVD-2026-69449

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-73722 Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-73722 Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-73717

CVE-2026-73717 is a command injection vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated remote attacker can execute arbitrary commands on the underlying operating system, potentially leading to complete system compromise . Exploitation requ...

EUVD-2026-69444

A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73717 Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73704

A command sanitization bypass in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator to escalate to administrative access , resulting in complete system compromise. The vulnerability is classified as Authenticated Command Injection per the CVELIST record. The ...

EUVD-2026-69431

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

CVE-2026-73704 Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

CVE-2026-73704 Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

CVE-2016-10033

CVE-2016-10033 – PHPMailer Remote Code Execution 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2016-10033 , a vulnerability in PHPMailer versions prior to 5.2.18. The issue occurs when the $additionalparameters argument of PHP's built-in mail function is improperly...