CVE-2024-4577

CVE-2024-4577 root@kitploit: usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments:...

CVE-2023-21837

CVE-2023-21837 POC、EXP，ChatGPT 为我生成 代码 root@kitploit: import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost, targetport...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 描述 Oracle Fusion Middleware 的 Oracle WebLogic Server 产品（组件：Core）中存在漏洞。受支持的受影响版本为 12.2.1.4.0 和 14.1.1.0.0。该漏洞易于利用，允许未经身份验证的攻击者通过 T3、IIOP 网络访问破坏 Oracle WebLogic Server。成功利用此漏洞的攻击可导致未经授权访问关键数据，或完全访问所有 Oracle WebLogic Server 可访问的数据。CVSS 3.1 基础评分为 7.5（影响机密性）。CVSS...

CVE-2022-39802

3242933 – CVE-2022-39802 SAP Manufacturing Execution 中的文件路径遍历漏洞 基本信息 风险：严重 受影响版本： root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 厂商 URL：https://sap.com 漏洞：文件路径遍历漏洞 报告时间：2022 年 9 月 公开公告日期：2022 年 10 月 12 日 参考：SAP Security Note 3242933 作者：RedRays R...

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 认证绕过漏洞利用工具 概览 这是一个针对 CVE-2025-41646 的 Python3 漏洞利用脚本，该漏洞是一个影响 RevPi Webstatus = 2.4.5 的 认证绕过漏洞 。 漏洞详情： CVE ID : CVE-2025-41646 受影响产品 : RevPi Webstatus = 2.4.5 影响 : 远程攻击者可绕过认证并获取有效的管理员会话ID。 漏洞类型 : 认证绕过 攻击向量 : 远程 HTTP POST 请求到 /php/dal.php 功能 支持 单个目标 或通过目标列表...

EUVD-2026-79543

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit 用于远程识别和/或利用Log4shell漏洞的bash脚本。 该工具使用LDAP payload以及X-Api-Version、User-Agent和X-Forwarded-For头部进行多项测试。 务必在获得被审计服务/应用程序所有者的授权后使用此脚本。 依赖项： 1. 从Github创建预配置的LDAP服务器：https://github.com/mbechler/marshalsec mvn clean package -DskipTests && Java -cp...

EUVD-2026-79226

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

CVE-2026-76700

HPE Networking EdgeConnect SD-WAN Gateways are affected by vulnerabilities that allow an unauthenticated remote attacker to cause a denial-of-service , interrupting normal operation of the affected service. The CVSS 3.1 base score is 5.9 (MEDIUM) with a high attack complexity , no required privil...

CVE-2026-76695

CVE-2026-76695 affects the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . The vulnerability is a buffer overflow that can be triggered by an unauthenticated remote attacker sending specially crafted packets to the affected service. Successful exploitation may compromi...

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56960

In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55366

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0200

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0170

In Vp9DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-27997-POC

用法: python3 cve-2022-42475.py rhost rport lhost lport 示例: python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 免责声明: 本项目仅用于教育和道德测试目的。未经事先相互同意，使用此工具攻击目标是非法的。开发者不承担任何责任，也不对因使用此工具造成的任何滥用或损害负责。...

CVE-2026-58704

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78989

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56967

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78969

In ReadTileInfo of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...