Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 Poc root@kitploit: $$::-$::-$$::-$ Betroffene Versionen: alle Versionen von 2.0-beta9 bis 2.16.0 Diese Anwendung basiert auf einer Spring Boot Webanwendung, die anfällig für CVE-2021-45105 ist Sie verwendet Log4j 2.16.0 Ausführen der Anwendung Führen Sie es aus:...

CVE-2026-79658

Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unfiltered to go-i18n's NewLocalizer, which internally calls golang.org/x/text/language.ParseAcceptLanguage. The...

CVE-2026-77996

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

Low: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration

A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 e SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Módulo Metasploit Este módulo envia um pacote especialmente elaborado para a Porta 50000/UDP que pode causar uma negação de...

CVE-2022-22965_PoC

Este repositorio nao tem um README...

RLSA-2026:59220 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

python-pyasn1 security update

An update is available for python-pyasn1. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

nginx security update

An update is available for nginx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

python-pyasn1 security update

An update is available for python-pyasn1. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

apache-tomcat-log4j

Log4j2 CVE-2021-44228 Vulnerabilità POC in Apache Tomcat Anteprima Configurazione Avviare il server tomcat root@kitploit: git clone cd apache-tomcat-10.0.14/bin startup.bat Servire la classe exploit root@kitploit: cd exploit py -m http.server 8888 root@kitploit: cd exploit java -cp...

Bitrix24DoS

Bitrix24 DoS Exploit Dieses Repository enthält ein Python-Skript, das entwickelt wurde, um eine Denial-of-Service DoS-Sicherheitslücke in Bitrix24 auszunutzen. Bitte beachten Sie, dass dieses Skript nur für Bildungszwecke gedacht ist und seine Verwendung für unbefugte Aktivitäten illegal und...

bash-tls-reneg-attack

bash-tls-reneg-attack Ein Bash-Skript, das versucht, einen Server mit TLS-Neuverhandlungen zu überfluten, indem es den OpenSSL-Client verwendet. Siehe CVE-2011-1473 und CVE-2011-1473 für Details. Verwendung: ./tls-reneg.sh some.hostname.here:port...

acceleratortroll

AcceleratorTroll™ Abusare di CVE-2023-28206 per creare qualcosa di utile. Tabella di marcia Al momento stiamo ancora cercando di capire come funziona la vulnerabilità e come sfruttarla per qualcosa di diverso dai panics. Dimostrare che la vulnerabilità può essere utilizzata per ottenere privilegi...

http_bridge

Http ब्रिज प्रेरणा मैंने इस प्रोग्राम को एक अवधारणा प्रमाण के रूप में लिखा है ताकि इस विचार का परीक्षण किया जा सके कि tcp स्ट्रीम पैकेट्स को सरल http अनुरोधों जैसे PUT, PATCH, POST, GET के माध्यम से भेजा जा सके, बिना CONNECT विधि जैसे प्रॉक्सी तरीके का उपयोग किए। साथ ही रस्ट भाषा पर अपने नौसिखिए...

CVE-2025-24054_PoC

Questo repository non contiene un README...

Arecibo

Arecibo Endpoint para Exfiltração Fora de Banda DNS e HTTP Autores Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz Exfiltração DNS Crie um novo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Agora você pode usar este token identificativ...

BIT-KEYCLOAK-2026-7307 Keycloak: keycloak: denial of service via specially crafted saml input

A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language SAML endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service DoS where the server becomes...