CVE-2022-46080

KO 이 프로젝트는 Nexxt 라우터, 특히 버전 15.03.06.60을 대상으로 하는 원격 코드 실행RCE 취약점에 대한 개념 증명PoC 익스플로잇을 제공합니다. 이 취약점을 통해 공격자는 인증 없이 라우터에서 Telnet 서비스를 활성화하여 무단 액세스 권한을 얻을 수 있습니다. CVE 참조 CVE-2022-46080 Nexxt Router RCE Exploit 기능 인증 없는 원격 코드 실행 : 취약점을 악용하여 임의의 코드를 실행합니다. Telnet 서비스 활성화 : 지정된 비밀번호와 포트로 라우터에서 Telnet 서비...

ActiveMQ_CVE-2015-5254

ActiveMQ Deserialization CVE-2015-5254 Vulnerability Description: Security vulnerabilities exist in Apache ActiveMQ versions before 5.13.0. The issue stems from the program not restricting the classes that can be serialized in the broker. Remote attackers can exploit this by sending a specially...

CVE-2022-22963

CVE-2022-22963 spring cloud function spel rce spring cloud function one-click exploitation tool! by charis Blog https://charis3306.top/ Packaged as an exe file, ready to use out of the box Command theme root@kitploit: usage: Spring-cloud-function-spel0.2.exe -h --check CHECK --route ROUTE --url U...

CVE-2025-49113

CVE-2025-49113 RCE 익스플로잇 이 익스플로잇의 사용자 이름/비밀번호 인증 방법은 4단계로 이루어져 있습니다 코드가 약간 지저분합니다...

CVE-2022-30136

CVE-2022-30136 Windows Network File System 원격 익스플로잇 PoC 저자: Ricardo Narvaja 데모 목적으로만 사용하십시오. 전체 익스플로잇은 취약한 Windows Server 시스템에서 작동합니다. 분석 문서 확인: Analysis of CVE-2022-30136 “Windows Network File System Vulnerability“. 사용법 CVE-2022-22029 “Windows Network File System 취약점“ 분석 이 글은 Core Impact 익스플로잇...

ZimbraExploit

ZimbraExploit K8Cscan calls Zimbra8.8.11 Remote Code Execution Vulnerability GetShell https://www.cnblogs.com/k8gege/p/10822908.html CVE-2019-9621 Zimbra8.8.11 XXE GetShell Exploit...

cve-2022-26134

Atlassian Confluence OGNL Injection POC Vulnerability CVE-2022-26134 arbitrary code execution Usage: pip3 install termcolor python3 exploit.py http://example.com documentation :...

theway

The Way The Way is a tool for unpacking, repacking, and creating malicious Cisco Adaptive Security Device Manager ASDM packages. ASDM is the Java-based administrative GUI for Adaptive Security Appliance ASA systems e.g. firewalls and VPNs. The ASDM package is hosted on the ASA and sub-components...

CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection Download PoC script root@kitploit: git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 Run exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py...

CVE-2025-29306-PoC-FoxCMS-RCE

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit A Python exploit for CVE-2025-29306, a remote code execution vulnerability in FoxCMS. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability Multi-threaded for fast scanni...

CVE-2024-2961

Buddyforms 2.7.7 CNEXT RCE Abusing CVE-2024-2961 and CVE-2023–26326 to RCE Usage root@kitploit: git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port Analysis and...

CVE-2023-28432-minio_update_rce

minio-CVE-2023-28432-rce https://github.com/AbelChe/evilminio/tree/main Original project repository Personal packaging archive Affected versions: 2019-12-17T23-16-33Z to RELEASE.2023-03-20T20-16-18Z Reproduction: https://www.yuque.com/jason-soozc/luhd40/pgabr9xvg0kgx85v?singleDoc "MinIO...

Cve-2024-38063

CVE-2024-38063 Description This repository contains details and potential exploit code for CVE-2024-38063, a critical Windows TCP/IP Remote Code Execution RCE vulnerability. The vulnerability allows an unauthenticated attacker to execute arbitrary code on the target system through specially craft...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Example:...

cve-2021-42013-httpd

취약점 도커화: cve-2021-42013 이 프로젝트는 Docker를 사용하여 특정 취약점을 도커화하는 것을 목표로 합니다. 목표는 취약점을 안전하게 악용하고 테스트할 수 있는 격리된 환경을 생성하는 것입니다. 취약한 애플리케이션 Apache HTTP Server 2.4.50 - 원격 코드 실행 및 경로 탐색 설치 이 프로젝트를 실행하려면 머신에 다음이 필요합니다: Docker Python Curl 필수 구성 요소가 설치되면 이 Git 저장소를 머신에 클론할 수 있습니다: root@kitploit: git clone...

CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - Unauthenticated Limited Remote Code Execution Description: The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd' Reference :...

CVE-2019-7609

CVE-2019-7609 Kibana Vulnerability allowing remote code execution due to a flaw in Kibana's Timelion visualizer Environment Setup docker 1. Run the attached docker-compose.yml. root@kitploit: docker-compose up -d 2. Access http://127.0.0.1:5601 in a browser. Exploit 1. Prepare a reverse shell...

CVE-2022-39197

CVE-2022-39197 RCE POC 사용법 페이로드 준비 1. EvilJar/src/main/java/Exploit.java에서 Line 19를 페이로드로 수정하세요. 2. jar를 사용하여 빌드: mvn clean compile assembly:single 3. EvilJar/target/에서 serve/ 폴더로 EvilJar-1.0-jar-with-dependencies.jar를 이동하세요. 4. serve\evil.svg를 편집하여 attacker를 대체하세요. 5. 서비스 실행: python3 -m...

CVE-2022-22954

CVE-2022-22954 Attention Please use this at your own risk. This repo is meant only for educational purposes and we are strictly against all illegal intentions and we would not be responsible of any illegal activities associated with this repo. Be ethical! Example root@kitploit: python3...