CVE-2026-78971

In Halo = 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions...

CVE-2026-78635

The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag,...

CVE-2026-17583

cve-id Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso Sencillo Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetraci...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path through the macOS host detector command execution in HostDetector.cs. An attacker can execute arbitrary code in the application's security context by supplying a malicious ioreg binary earlier in PATH and triggerin...

CVE-2017-10271

weblogicwlswsatrce Weblogic wls-wsat组件反序列化漏洞CVE-2017-10271利用脚本，参考https://github.com/s3xy/CVE-2017-10271修改。 命令执行并回显 直接上传shell 在linux下weblogic 10.3.6.0测试OK 使用方法及参数 python weblogicwlswsatexp.py -t IP:7001 root@kitploit: usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React2Shell CVE-2025-55182 unauthenticated...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection → post-index-change → Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...

EUVD-2026-69701

Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections...

Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections

Summary An improper CRLF neutralization flaw in Predis' pipeline handling on aggregate connections lets an unauthenticated attacker who can influence any pipelined argument — a value or a key, e.g. a URL slug used as a cache key — smuggle arbitrary Redis commands into the connection. - On cluster...

GHSA-W6F5-V2H6-G786 Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections

Summary An improper CRLF neutralization flaw in Predis' pipeline handling on aggregate connections lets an unauthenticated attacker who can influence any pipelined argument — a value or a key, e.g. a URL slug used as a cache key — smuggle arbitrary Redis commands into the connection. - On cluster...

CVE-2024-25600

Bricks Builder RCE 漏洞利用 CVE-2024-25600 本项目包含一个基于 Python 的漏洞利用脚本，针对 Bricks Builder WordPress 插件中标识为 CVE-2024-25600 的远程代码执行（RCE）漏洞。该漏洞利用程序通过一个易受攻击的 REST API 端点注入 PHP 代码，从而实现未经授权的远程命令执行。 此外，还提供了一个分析脚本，用于解析和汇总漏洞利用结果，包括提取用户信息和执行 IP 地理位置查询。 功能特性 自动从目标 URL 提取 nonce。 用于验证漏洞的测试载荷。 注入后门载荷，可通过 HTTP GET...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster 未认证命令注入 这是一个针对 CVE-2024-1212 的漏洞利用脚本，该漏洞是 Progress Kemp LoadMaster 中的一个未认证命令注入漏洞 。 漏洞概述 CVE-2024-1212 影响 Progress Kemp LoadMaster ，允许未认证攻击者 通过向 /access/set 端点发送精心构造的 HTTP 请求在系统上执行任意命令。 功能特性 未认证远程命令执行（RCE） 随机化 User-Agent 头以规避基本检测 支持代理，用于 Burp/ZAP 拦截（-p）...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS 命令注入漏洞利用 该基于Python的漏洞利用工具针对多款D-Link NAS产品的命令注入漏洞，通过 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd 端点进行攻击。该漏洞允许未经认证的攻击者在受影响设备上执行任意系统命令。 描述 CVE-2024-10915 影响多款 D-Link NAS 型号。攻击者可通过 cgiuseradd 命令中的 group 参数注入命令，从而导致远程代码执行。 受影响的产品 D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325...

CVE-2020-0069_poc

描述 本仓库包含我们在小米 Redmi 6a（搭载联发科 MT6762M SoC）上研究 CVE-2020-0069 时使用的材料。 共有三个程序： kernelrw.c 一个允许读写内核内存的 C 程序 poc.sh 一个 shell 脚本 syscallhook.c 一个可用于跟踪 mtk-su 程序的 C 库（已在版本 19 上测试） 构建 要构建二进制文件： root@kitploit: $ ndk-build 然后将它们推送到设备上： root@kitploit: $ adb push poc.sh /data/local/tmp $ adb push...

CVE-2019-2618

PoC root@kitploit: POST /beawlsdeploymentinternal/DeploymentService HTTP/1.1 Host: 127.0.0.1:7001 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux i686; rv:20.0 Gecko/20100101 Firefox/20.0 Accept: text/html, image/gif, image/jpeg, /; q=.2 Connection: keep-alive username: weblogic password: weblogic...

CVE-2018-2893

CVE-2018-2893 步骤 1 java -jar ysoserial-cve-2018-2893.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-2893.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ JRMPClient @mbechler JRMPClient2 @mbechler JRMPClient3 @mbechler...

crtsh

crtsh crt.sh 的 API 客户端 crtsh 允许获取 HTTPS 网站的信息。 例如，搜索子域名。 该工具使用证书透明度日志。 更多信息，请查看 https://crt.sh/ 示例 子域名 搜索 example.com 的子域名 组织 在 --query 中，% 可以用作通配符。 安装 二进制文件 从发布页面下载二进制文件 源码 root@kitploit: $ go get -u github.com/knqyf263/crtsh 用法 root@kitploit: % crtsh -h crtsh client Usage: crtsh command Availab...

Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A remote code execution...

GHSA-GH2H-RHPH-H37G Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A remote code execution...

Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.Build.Tasks.Git and Microsoft.SourceLink.AzureRepos.Git. This advisory also provides guidance on what developers can do to update their applications to remove this...