CVE-2024-24140

CVE-2024-24140: Inyección SQL en la aplicación Daily Habit Tracker Prueba de concepto PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24140.md Prueba de concepto PoC : https://github.com/BurakSevben/CVE-2024-24140/blob/main/CVE-2024-24140.md...

CVE-2019-9053

CVE-2019-9053 Original post can be found here Tested on Python 3.11 I don't take any responsibility for missuse or unauthorized use of this script. Check out the blog post for more information about this script Requirements pip3 install httpx...

CVE-2024-52550

CVE-2024-52550 CVE-2024-52550 jenkins probador o PoC...

exploitBenchSkill

OpenSec ExploitBench V8 PoC Skill An installable Pi and Agent...

CVE-2019-15107

CVE-2019-15107 POC for CVE 2019-15107 Use for educational purpose only. To use, opena listener on your machine nc -lnvp Modify the perl command to match your ip and port. Launch the script, a reverse shell will open on your listener. The python script will timeout, this is expected...

CVE-2019-19609-POC-Python

The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...

RuoYI-4.2-Shiro-721-Docker-PoC

RuoYI 4.2 Shiro 1.4.1 Shiro-721 Entorno de reproducción de la vulnerabilidad Se utiliza para reproducir la vulnerabilidad Shiro-721 CVE-2019-12422 en RuoYI. Aviso: Este servicio contiene vulnerabilidades graves , solo para fines de reproducción de vulnerabilidades, no lo utilice en producción...

GrafanaDirInclusion

Grafana CVE-2021-43798 Exploit Script Script to demonstrate the Grafana directory traversal exploit CVE-2021-43798 that affects Grafana versions 8.0.0-beta1 through 8.3.0. Primarily used for a demonstration in a CTF. Written in python with standard library modules only. Only use this for legitima...

ExploitPOC_MS15-014_CVE-2015-0009

Este repositorio no tiene un README...

CVE-2022-34918

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder root@kitploit: $ ls getroot poc $ ./poc CVE-2022-34918...

TKEY-remote-DoS-vulnerability-exploit

TKEY-remote-DoS-vulnerability-exploit Exploit code for CVE-2015-5477 POC...

CVE-2023-38831

CVE-2023-38831 winrar exploit 6.22 = Quick poc root@kitploit: git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc example usage root@kitploit: python3 simplefile.txt script.bat output.zip example usage https://www.youtube.com/watch?v=-mN4tTKaMhQ...

CVE-2024-24141

CVE-2024-24141: Sistema-Gestor-de-Tareas-Escolares-InyecciónSQL-1 Prueba de ConceptoPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Prueba de ConceptoPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-27956-for-fscan

🛑CVE-2024-27956-for-fscan Gracias por el PoC de diego-tella Inglés Esta es una regla PoC YAML de CVE-2024-27956 Wordpress Automatic SQLi para fscan. Cómo usar: 1. Agregue el archivo yml a la ruta: /fscan-main/WebScan/pocs. 2. Compile los archivos go de fscan. 3. Inicie fscan y disfrute. Atención:...

CVE-2024-24138

CVE-2024-24138: Online Timesheet App SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24138.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24138/blob/main/CVE-2024-24138.md...

CVE-2025-30065-PoC

CVE-2025-30065 PoC Usage Build the image root@kitploit: docker build -t cve-2025-30065 . Generate the malicious Parquet root@kitploit: docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Trigger the exploit root@kitploit: docker run --rm -v...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2018-17553

CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS version 2.8 and prior This proof of concept was put together when working on the Black Pearl box from TCM. I couldn't find anyone that put out a PoC other than just using Metasploit. As I'm avoiding Metasploit in my hacking journey to then go back an...

CVE-2024-39199

CVE-2024-39199 / CNVD-2024-31551 write url in url.txt and run 100000CMS-POC.py to check...

CVE-2023-23169

CVE-2023-23169 POC de CVE-2023-23169 Inclusión de archivos locales y falsificación de solicitudes del lado del servidor Pasos para reproducir : Inclusión de archivos locales : 1. echo "" poc.docx 2. Sube el archivo en los servicios de PDFocus 3. Visualiza/Descarga el archivo después para activar ...