CVE-2022-22954

CVE-2022-22954 PoC RCE en VMware Workspace ONE Access e Identity Manager mediante SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fi...

CVE-2026-79573

L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

netgear-pwnagent

PwnAgent Este es el PoC para CVE-2023-24749, también conocido como PwnAgent, una RCE del lado WAN con un solo clic en los enrutadores Netgear RAX. Puedes desencadenar este exploit visitando http://pwn.mahaloz.re. Explicación Por favor, visita el blog que explica esto aquí...

POC-AIOWPM-CVE-2026-19949

CVE-2026-19949 — Documented, reproducible-in-Docker proof of concept Unauthenticated second-order SQL injection in All-in-One WP Migration and Backup WordPress that escalates to leaking the ai1wmsecretkey and, with it, to remote code execution RCE. Read this in: English · Español...

Nginx_cve-2026-42945-scanner-gui

Ngxin cve-2026-42945-scanner-gui Necesita ejecutar jdk21version java -jar cve-2026-42945-scanner.... Escaneo masivo + explotación de vulnerabilidades con un clic Necesita jdk21 para ejecutarse Después de descomprimir, ejecuta java -jar cve-2026-42945-scanner.... Escaneo masivo + explotación de...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

VMware-CVE-2022-22954

VMware-CVE-2022-22954 VMware CVE-2022-22954 Workspace ONE Access Freemarker Inyección de plantillas del lado del servidor PoC para Vmware CVE-2022-22954 ¡¡Usa esta petición GET de una sola línea!! Esto ejecutará cat /etc/passwd...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 Information Disclosure + RCE All-in-One This PoC writes a file to the target, here it writes phpinfo. If you need other functionality, modify it yourself. Do not use for illegal purposes...

EulerOS 2.0 SP12 : bzip2 (EulerOS-SA-2026-3250)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

CVE-2026-79573

L-ONE v1.0.0 is affected by multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component, exploitable through the busid, id, and taskid parameters. An attacker can craft a malicious SQL statement to access sensitive database information. No specific patch version or r...

EUVD-2026-72909

L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

glib2 security update

2.80.4-22 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap 2.80.4-21 - Fix CVE-2026-15588: limit D-Bus auth line read length 2.80.4-20 - Fix CVE-2026-58011: range validation in gdatetimeaddfull 2.80.4-19 - Fix CVE-2026-58012: buffer overflow in gregex.c with GREGEXRAW 2.80.4-18 - F...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode root@kitploit: python go.py Enter target URL → select function menu. Detection Target root@kitploit:...

CVE-2022-40684

CVE-2022-40684 Enumerar todos los nombres de usuario y escribir la clave pública SSH en un solo clic Integra y optimiza el código de estos dos repositorios para lograr el resultado de enumerar todos los nombres de usuario y escribir la clave pública SSH en un solo clic:...

CVE-2026-86297

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

EUVD-2026-72339

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

CVE-2026-86297 D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

CVE-2026-86297

A remote off-by-one vulnerability exists in the L2TP Control Message Parser of the D-Link DIR-605 (firmware B1v202WWB03), specifically in the tunnel_set_params function of progs.gpl/pppd.alpha/l2tp/tunnel.c. Manipulation of the peer_hostname argument triggers the out-of-bounds condition. No authe...

cve-2010-1938

🚀 Exploit FTP Off-by-One CVE-2010-1938 Un script sencillo en Python para probar una vulnerabilidad off-by-one en la librería OPIE CVE-2010-1938. Esta vulnerabilidad afecta a ciertos servidores FTP y puede permitir una Denegación de Servicio DoS o ejecución arbitraria de código. 📜 Descripción Este...

Root-My-Galaxy

Root My Galaxy Root My Galaxy es un instalador de un solo clic para combinaciones de modelos y kernels de Samsung explícitamente compatibles. La aplicación en sí se mantiene separada de los offsets de dispositivos, los payloads de exploits nativos y los artefactos de compilación de KernelSU. Últi...