EternalBlue-Exploit-Demonstration-MS17-010

Demostración del Exploit EternalBlue MS17-010 Laboratorio de ciberseguridad que demuestra la explotación de CVE-2017-0144 EternalBlue usando Metasploit contra un sistema Windows 7 vulnerable, obteniendo acceso a nivel SYSTEM a través de Meterpreter. Este proyecto también simula un ataque de...

CVE-2026-92880

A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcmreadcoefsbe of the file src/coding/vadpcmdecoder.c of the component EA SCHl parser. This manipulation of the argument entry/entries causes out-of-bounds write. Remote exploitation of the attack is possible...

Ruijie RG-EW1200G Router Background - Login Bypass

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

Cobbler 'XML-RPC' - Authentication Bypass

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

HuangDou UTCMS V9 - OS Command Injection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

Hongjing e-HR 2020 - SQL Injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

WeiYe-Jing datax-web <= 2.1.2 - OS Command Injection

A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection...

Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 20260320 through 20260501 contains an authentication bypass caused by exploitation of a shared cryptographic key and encryption oracle in dbbak.php and loggingctl::loggingmore, letting unauthenticated remote attackers access database backup and restore functions, exploit requires...

Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass

Kimai Docker images = 2.58.0 which generates a random APPSECRET on first boot. Alternatively, manually set a unique APPSECRET in your .env.local file. reference: - https://github.com/advisories/GHSA-jr9p-4h4j-6c58 - https://github.com/kimai/kimai/releases/tag/2.58.0 classification: cve-id:...

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

CVE-2026-4747-

CVE-2026-4747: FreeBSD Remote Kernel RCE First remote kernel exploit both discovered and exploited by an AI 📋 Quick Summary...

CVE-2023-38632

CVE-2023-38632 async-sockets-cpp 0.3.1까지의 버전에는 tcpsocket.hpp의 102-110행에 있는 static void ReceiveTCPSocket socket에 원격 버퍼 오버플로 취약점이 있습니다. 이 버퍼 오버플로는 해당하는 모든 TCP 서버에 영향을 미칩니다. 원격 버퍼 오버플로는 소켓에 연결한 후 대용량 바이트 버퍼를 전송하여 트리거할 수 있습니다. root@kitploit: while messageLength = recvsocket-sock, tempBuffer,...

Samba-Usermap-exploit

CVE-2007-2447 - Exploit de usermap de Samba. Uso: root@kitploit: $ python3 exploit.py RHOST -- La dirección objetivo RPORT -- El puerto objetivo TCP : 139 LHOST -- La dirección de escucha LPORT -- El puerto de escucha Instalación root@kitploit: git clone...

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series - Divulgación de información Argumentos opcionales: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Uso python3 CVE-2022-31269.py -u http://127.0.0....

CVE-2007-2447

Sambaster cve-2007-2447 Samba 3.0.20 módulo requerido: root@kitploit: pysmb si no lo tienes instalado: root@kitploit: pip3 install pysmb Uso: root@kitploit: python3 sambaster.py...

Exim-CVE-2018-6789

Exim CVE-2018-6789 Materiales PoC para explotar CVE-2018-6789. La entrada de blog que explica el PoC está disponible en Synacktiv Blog. Este PoC se conecta a un servidor Exim vulnerable y explota CVE-2018-6789. Uso root@kitploit: usage: exploit -hv options: -h, --help Print this help -v, --verbos...

CVE-2026-57012

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-1971

CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...

EUVD-2026-78301

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2026-91005

SourceCodester Online Faculty Clearance System 1.0 is vulnerable to an unrestricted file upload in the Profile Picture Upload component. The flaw resides in the move_uploaded_file function within production/edit_picture.php , where manipulation of the File argument allows an attacker to upload ar...