143704 matches found
NetAlertX v26.9.0
NetAlertX - Network Visibility & Asset Intelligence Framework 📷 Click for more screenshots | | ---|---|--- !presencehttps://assets.kitploit.com/production/public/readmes/295/d2773fcfbdc9d1a31a6e178016e1333b685afe85257bb3...
cve-2017-5638
CVE-2017-5638 PoC Code in Python | DORK: ext:action Example PoC Code for CVE-2017-5638 | Apache Struts Exploit | DORK: ext:action USAGE: python struts.py https://victim.site dir The initial Python Script that was Posted didn't correctly format the Content-Type Header. I recoded the Content Type...
hp-slate7-root-kit
Root for the HP Slate 7 2800 on Android 4.1.1 English | Русский This repository contains a complete, self-contained kit for obtaining persistent root access on the HP Slate 7 2800 running firmware 1.05.18 and kernel Linux 3.0.8+ by exploiting the local vulnerability CVE-2015-1805. The kit was run...
Tomcat_PUT_GUI_EXP
TomcatPUTEXPV1.4 Tomcat PUT Method Arbitrary File Write CVE-2017-12615 Graphical Exploitation Tool Vulnerability Introduction On September 19, 2017, Apache Tomcat officially confirmed and fixed two high-risk vulnerabilities, with CVE IDs: CVE-2017-12615 and CVE-2017-12616. Among them, the remote...
spring-framework-rce
spring-framework-rce CVE-2022-22965 Requirements 1. tomcat8 8 Usage 1. Download springframeworkrce-0.0.1-SNAPSHOT.zip, unzip, and rename to ROOT.war. 2. Replace the ROOT folder or ROOT.war in the webapps folder of tomcat. 3. Switch to the bin directory of tomcat and run .\catalina.bat run. Testin...
CVE-2019-7609
CVE-2019-7609 docker lab setup for kibana-7609 Reference : https://github.com/mpgn/CVE-2019-7609 root@kitploit: Open Kibana Past one of the following payload into the Timelion visualizer Click run On the left panel click on Canvas Your reverse shell should pop ! : payload by @securityMB...
CVE-2021-3560
PolicyKit CVE-2021-3560 Exploitation Authentication Agent C implementation of CVE-2021-3560 exploitation, blog posts about this exploitation: https://ricterz.me/posts/2022-04-28-a-new-exploit-method-for-cve-2021-3560-polkit-linux-privilege-escalation.txt...
CVE-2025-52136
CVE-2025-52136 root@kitploit: https://github.com/ricardojoserf/emqx-RCE The original exploitation method uploads an EMQX plugin and adds Erlang os module calls in the plugin template code to execute system commands for RCE. In an outbound network environment, curl is available by default, so you...
vault v2.1.0
Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...
CVE-2026-40179-PoC
CVE-2026-40179 — Prometheus stored XSS via remotewrite A minimal, dependency-light proof of concept for CVE-2026-40179 GHSA-vffh-x6r8-xx99: stored cross-site scripting in the Prometheus web UI, delivered through an unauthenticated remotewrite endpoint. The vulnerability Prometheus 3.x renders...
GeoNetwork - Reflected Cross-Site Scripting
GeoNetwork versions 4.4.5 through 4.4.11 are vulnerable to reflected cross-site scripting XSS in the public unauthenticated catalog search functionality. The uiconfig query parameter of the catalog.search endpoint is reflected into a JavaScript context without sufficient sanitization, allowing...
nexus_rce_CVE-2019-7238
nexusrceCVE-2019-7238 Some debug notes and exploit not blind Exploit Use burpsuite, modify ls / -al in the request. Note that double quotes will be replaced by single quotes. root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.14;...
reconftw v5.0.0-beta.1
reconFTW !Dockerhttps://img.shields.io/badge/docker-%230db7ed.svg?style=for-the-badge&logo=docker&logoColor=w...
openssl_g2.5_CVE-2014-3566
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
openssl_G2.5_CVE-2014-3570
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2014-5139
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
SUSE CVE-2026-19953
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verification only when enabled v...
SUSE CVE-2026-37236
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...