CVE-2024-24809-Proof-of-concept

CVE-2024-24809 Detail Description Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by...

audit-xss-cve-2020-7934

CVE 2020-7934 كيفية تشغيل CVE المتطلبات 1. docker ملاحظات من الممكن وضع سكريبت الهجوم على الإنترنت مع كود js http://yourjavascript.com/ سكريبت Js الخاص بنا على الإنترنت للهجوم html أوامر التهيئة 1. انتقل إلى المجلد الجذر لهذا المشروع 2. شغل "sudo docker-compose up --build" 3. طرفية جديدة: شغل...

CVE-2026-13610

CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Improper Privilege Management | Unauthenticated registration with attacker-chosen staff role → patient PHI disclosure Overview Critical vulnerability in the KiviCare – Clinic & Patient Management System WordPress plugin versions...

PoC-CVE-2022-4939-

PoC-CVE-2022-4939 The attacker sends a specially crafted request to the wpajaxnoprivwcfmajaxcontroller AJAX action to modify the membership registration form and set the registration role to that of an administrator. Then, the plugin processes the request and modifies the membership registration...

CVE-2021-22911

CVE-2021-22911 If you have already registered a user this will only reset the admin password, and not both. Making the exploit run much faster. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

CVE-2025-13342

CVE-2025-13342 PoC WordPress के लिए DynamiApps का Frontend Admin प्लगइन, संस्करण 3.28.20 तक और सहित सभी संस्करणों में, वर्डप्रेस विकल्पों के अनधिकृत संशोधन के प्रति संवेदनशील है। इससे हमलावर उपयोगकर्ताओं को पंजीकृत कर सकते हैं और डिफ़ॉल्ट भूमिका को व्यवस्थापक पर सेट कर सकते हैं। यदि Frontend Admi...

Pachine

Pachine PythonによるCVE-2021-42278 Active Directoryの権限昇格 の実装です。 インストール root@kitploit: $ pip3 install impacket 使用法 root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios NETBIOSNAME -computer-name...

CVE-2021-33831

परिचय यह एप्लिकेशन जर्मन संक्रमण कानूनों के अनुसार लोगों पर नज़र रखने के लिए उपयोग किया जाता है ताकि Covid-19 संक्रमण श्रृंखलाओं का पता लगाया जा सके। इसे iCampus नामक एक छात्र परियोजना द्वारा बनाया गया था और इसका उपयोग न केवल विल्डाउ विश्वविद्यालय में बल्कि कॉटबस-सेनफ्टेनबर्ग में भी किया जाता है।...

CVE-2025-4334

CVE-2025-4334 - Simple User Registration --form الوسائط: -u / --url → عنوان URL الأساسي لووردبريس مثال: https://target.com/wordpress/ --form → عنوان URL الكامل لنموذج التسجيل مثال: https://target.com/wpr/default-registration/ مثال: root@kitploit: python3 CVE-2025-4334.py -u...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC This repository contains a benign proof of concept for CVE-2026-36227, a path traversal issue in Easy Chat Server 3.1 user registration handling. This repository is for authorized security research and local reproduction only. Do no...

CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks Local Lab Local Docker lab for analyzing and reproducing CVE-2026-7465 in the WordPress plugin Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. This lab compares: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 The proof is intentionally least-harm. ...

CVE-2026-83628

Theme My Login plugin for WordPress (versions

ContextMenuHijack

ContextMenuHijack This original idea that inspired me is from @NinjaParanoid : ContextMenuHijack is a simple persistence technique that use COM hijacking based on human behavior, when you right click on a file/folder in the File Explorer to open the Context Menu, it executes at the same time the...

CVE-2026-57161

A flaw was found in PJSIP, a multimedia communication library. When processing Service-Route headers in a registration response, the PJSUA component does not properly bound the number of headers, leading to a stack buffer overflow. A malicious or compromised registrar, or a spoofed response over...

CVE-2026-63077

CVE-2026-63077 — JetBrains TeamCity Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Actively Exploited in the Wild This repository contains a fully functional proof-of-concept PoC exploit for CVE-2026-63077 , a critical deserialization vulnerability in...

CVE-2024-50485

CVE-2024-50485 Exam Matrix = 1.5 - Unauthenticated Privilege Escalation Description: The Exam Matrix plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5. This is due to the plugin not properly restricting functionality that makes it possible for...

CVE-2026-11961

CVE-2026-11961 Mass Exploit tool for CVE-2026-11961 affecting the WordPress User Registration & Membership plugin. Features Plugin version detection Single target support Batch target processing Multi-thread support Random or custom credentials HTTP/HTTPS proxy support Request timeout configurati...

CVE-2026-57161

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

CVE-2026-57161

PJSIP , an open-source multimedia communication library written in C, contains a stack buffer overflow in PJSUA's update_service_route() function (pjsua_acc.c). When processing a 2xx response to a REGISTER request, Service-Route URIs are stored into a fixed-size array without bounding the number ...

CVE-2026-57161 PJSIP: Stack overflow handling Service-Route headers in a registration response

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...