274824 matches found
CVE-2019-15107
Webmin Server Management Tool RCE Vulnerability CVE-2019-15107 Summary CVE-2019-15107 is a vulnerability in Webmin, a web-based system administration tool for Unix systems. In the code that changes passwords, a specific parameter is passed directly to a shell command without filtering, allowing...
CVE-2026-23744-script
A script for CVE-2026-23744, which exploits MCPJam Inspector versions = 1.4.2. Based off the curl command used here: https://github.com/advisories/GHSA-232v-j27c-5pp6 Make sure your /etc/hosts file is correct and points to the domain/vhost of the target...
Triage-CVE-2017-0144
ๅ็ฑปๅๆ๏ผCVE-2017-0144๏ผๆฐธๆไน่ / SMBv1 โ ไธ WannaCry ไผ ๆญ็ธๅ ณ๏ผ ๅฏนไบๆฌๅฎ้ช๏ผ็ฎๆ ๆฏๅๆๅฆไธไธชไผๆๅจ็ฅ็็ๅฎไธ็ๆผๆด๏ผ่ฟๆฌกๆฏๆฐธๆไน่๏ผEternalBlue๏ผ๏ผๅณ SMBv1 ็ผบ้ท๏ผๅฎๆพ่ขซ WannaCry ๅ็ดข่ฝฏไปถ็ๅๅคง่งๆจกๅฉ็จใ ็ฌฌ 1 ๆญฅ๏ผๅจ NVD ไธญๆๅผ CVE ๆ่ฎฟ้ฎไบๅฝๅฎถๆผๆดๆฐๆฎๅบ๏ผNVD๏ผๅนถๆฃ็ดขไบ่ฏฅ CVE๏ผ root@kitploit: https://nvd.nist.gov/vuln/search/nvd/home?resultType=records ๆๆ็ดขไบ CVE-2017-0144 ๅนถๆๅผไบ็ปๆ้กต้ขใ ็ฌฌ 2...
CVE-2015-1578-PoC
CVE-2015-1578-PoC Overview This is a proof-of-concept exploit for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This PoC is intended to serve as a clean, minimal, and well-structured...
CVE-2017-15944-POC
CVE-2017-15944-POC POC For CVE-2017-15944 Palo Alto Networks firewalls remote root code execution Usage root@kitploit: python panos-poc.py https://panip...
CVE-2024-36401-PoC
CVE-2024-36401-PoC ใใฎใชใใธใใชใซใฏใCVE-2024-36401 ใฎๆฆๅฟตๅฎ่จผ PoC ในใฏใชใใใๅซใพใใฆใใพใใใใฎ่ๅผฑๆงใๆช็จใใใจใๆจ็ใตใผใใผไธใงใชใขใผใใณใผใๅฎ่กใๅฏ่ฝใซใชใใพใใ ็นๅพด Perl ใไฝฟ็จใใฆใชใใผในใทใงใซใชในใใผใ่จญๅฎใใพใใ Base64 ใไฝฟ็จใใฆใณใใณใใใจใณใณใผใใใพใใ ่ๅผฑๆงใๆช็จใใใใใซๆจ็ใตใผใใผใซใชใฏใจในใใ้ไฟกใใพใใ ใทใฐใใซๅฆ็ใซใใๅฒใ่พผใฟใ้ฉๅใซๅฆ็ใใพใใ ๅๆๆกไปถ Python 3.x requests ใฉใคใใฉใช ใคใณในใใผใซ 1. ใใฎใชใใธใใชใใฏใญใผใณใใพใ: root@kitploit: git...
CVE-2026-22444
CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview CVE-2026-22444 is a security vulnerability affecting Apache Solr, publicly disclosed around January 20, 2026. The vulnerability stems from insufficient input validation CWE-20: Improper Input Validation on certain API parameter...
CVE-2014-0094
CVE-2014-0094 For verification. Refer to https://piyolog.hatenadiary.jp/entry/20140417/1397750197, vulhub/java:7u55-jdk tomcat-8.0.5 struts-2.3.16 reproduced. The classLoader is working, but the crucial log is percent-encoded, so it does not lead to RCE Windows version also added but only 7u191...
CVE-2017-3241-POC
CVE-2017-3241-POC POC for java RMI deserialization vulnerability You probably need to use JDK 8 to run this poc. Just pay attention to Message class in both client and server side. They are different. And the difference is the key to understand this vulnerability. The fix Oracle published is to...
CVE-2023-50564
CVE-2023-50564 CVE-2023-50564 is an RCE vulnerability in Pluck CMS v4.7.18. It is made possible through an arbitrary file upload vulnerability in the /inc/modulesinstall.php component allowing to execute arbitrary code by uploading a malicious .zip file. Usage Before running the exploit, the...
cve-2023-51385
Verify CVE-2023-51385 First, add the following content to /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p There is a command injection in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar...
DVWA-ZAP-PENTEST
DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...
CVE-2017-8464-EXP
CVE-2017-8464-EXP x86 ใจ x64 ใใตใใผใ ใในใ็จใฎใฟ Lnk ใใกใคใซใฎๅบๅ ธ: https://github.com/rapid7/metasploit-framework/pull/8767 ykoster ใซๆ่ฌ ๅฐใใชๅคๆด: dll ใใกใคใซใ็ฝฎใๆใใexplorer.exe ใใฏใฉใใทใฅใใใใฐใไฟฎๆญฃใใพใใใykoster ใใใฎใใฐใไฟฎๆญฃๆธใฟ POC: x86: x64: USB ใใฉใคใใ็นๅฎใงใใๅ ดๅใฏใLNK ใใกใคใซ 1 ใคใงๅๅใงใใไพ: ่ฉณ็ดฐ:...
regreSSHion
regreSSHion Exploit PoC Description This repository contains an exploit targeting CVE-2024-6387 regreSSHion, a vulnerability in OpenSSH's server sshd on glibc-based Linux systems. It exploits a race condition in the signal handler of OpenSSH, potentially leading to remote code execution as root...
cve-2021-21985_exp
cve-2021-21985 exploit 0x01 Vulnerability Point Analysis available at: https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=homerapid7-analysis 0x02 exploit Reconstruct the beans object to achieve RCE. Bean list: root@kitploit: localizedMessageBundle vsanWorkerThreadFactory...
CVE-2026-14669
CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar function has a heap buffer overflow vulnerability when handling timezone formatting. By setting an overly long POSIX timezone abbreviation, an attacker can trigger an out-of-bounds write to a fixed...
CVE-2021-1675-PrintNightmare-Analysis
Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...
WSUSResponder
๐งฐ WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT ๐ฏ Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...
CVE-2025-62593-PoC
CVE-2025-62593 โ Ray Remote Code Execution unauthenticated Proof-of-concept for CVE-2025-62593 , an unauthenticated Remote Code Execution vulnerability in the Ray distributed AI compute engine, abused via browser-based DNS-rebinding attacks. It was added to the CISA Known Exploited Vulnerabilitie...
CVE-2024-24919-Check-Point-Remote-Access-VPN
CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...