996518 matches found
CVE-2026-89531
This CVE affects the svcrdma module in the Linux kernel . The vulnerability resides in handle_connect_req() : when svc_rdma_create_xprt() fails to allocate a new transport, the handler returns without action, causing the CM core to retain the new rdma_cm_id rather than destroying it. Each allocat...
CVE-2026-89332 Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...
CVE-2018-16167
Orden de instalación y ejecución 0. Instalación de LogonTracer Descargue desde dockerhub la versión 1.2.0 de logontracer, en la que se encontró una vulnerabilidad. root@kitploit: $docker pull jpcertcc/docker-logontracer:v1.2.0 1. Ejecución de LogonTracer Ejecute en el contenedor con el siguiente...
CVE-2025-49113-Roundcube_1.6.10
CVE-2025-49113 – Roundcube 1.6.10 Authenticated Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes. All demonstrations were performed in a controlled lab environment. Unauthorized testing or exploitation of systems without explicit...
PyRat
PyRat PyRat, an open-source remote control project based on Python XmlRPC, including a client and a server also called the control end, hereinafter collectively referred to as the server. Disclaimer: This project is for technical exchange only. Do not use it for commercial or illegal purposes. An...
SSTImap
SSTImap This project is based on Tplmap. SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive...
CVE-2025-54100
CVE-2025-54100 – PowerShell Response Parsing PoC A concise Proof-of-Concept showing how CVE-2025-54100 can lead to Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. Table of Contents What is CVE-2025-54100? How the PoC Works Quick Start Triggering From a Victim...
CVE-2017-0199
Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 es un práctico script en Python que proporciona a pentesters e investigadores de seguridad una forma rápida y efectiva de probar Microsoft Office RCE. Puede generar un archivo malicioso RTF/PPSX y entregar metasploit /...
CVE-2019-0708
CVE-2019-0708 Mass Detection 0x01 Preface CVE-2019-0708 Windows RDP Remote Code Execution Vulnerability On May 15, 2019, a high-risk vulnerability was disclosed for Windows series servers. This vulnerability affects a wide range of systems, including Windows 2003, Windows 2008, Windows 2008 R2,...
CVE-2024-38077-RDLCheck
CVE-2024-38077-RDLCheck Detect if the RDL service is running, quickly identify affected assets Usage: Install impacket root@kitploit: git clone https://github.com/fortra/impacket.git cd impacket python3 -m pipx install . Script Usage: root@kitploit: python3 RDLCheck.py usage: RDLCheck.py -h -ip I...
firepwner
CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example o...
mssqlproxy
mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...
CVE-2022-28108
Selenium Chrome RCE Exploit Extended This repository contains a modified version of a Metasploit module that exploits a Remote Code Execution vulnerability in older versions of Selenium Server Grid. Please read this README carefully before using this code. Acknowledgment of Original Code: This...
CVE-2024-50510
CVE-2024-50510 AR For Woocommerce = 6.2 - Unauthenticated Arbitrary File Upload Description The AR for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 6.2. This makes it possible for unauthenticated...
Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-
Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange For this lab, the goal was to practice triaging a well-known real-world vulnerability the way a security team might: reading the CVE details, understanding the CVSS score, and reasoning through how risky it actually is depending on the...
blueXploit
blueXploit blueXploit video blueXploit is my own proof-of-concept that reproduces CVE-2023-45866 , the Bluetooth keystroke-injection vulnerability discovered by Marc Newlin. It abuses a flaw in the Bluetooth protocol to inject keystrokes into a target device without pairing , opening the door to...
CVE-2024-34102
CVE-2024-34102 POC para CVE-2024-34102. Una vulnerabilidad de inyección de entidad XML sin autenticación en Magento / Adobe Commerce. Resumen Este POC intentará leer archivos de hosts objetivo que son vulnerables a la reciente CVE-2024-34102 de Magento / Adobe Commerce. Este POC se basa en este...
CVE-2025-2945
CVE-2025-2945 - pgAdmin4 Authenticated RCE Exploit Author: G0D150NE Version: 2.0.0 CVE: CVE-2025-2945 Severity: Critical CVSS 9.9 📌 Description Exploit for pgAdmin4 Remote Code Execution RCE vulnerability affecting versions 8.10 to 9.1. The vulnerability exists in the /sqleditor/querytool/downloa...
CVE-2022-22947
Spring Cloud Gateway 3.0.7 & 3.1.1 Inyección de Código RCE CVE: CVE-2022-22947 CVSS: 10.0 Vmware - https://tanzu.vmware.com/security/cve-2022-22947 Las aplicaciones que usan Spring Cloud Gateway son vulnerables a un ataque de inyección de código cuando el endpoint Gateway Actuator está habilitado...