Remot3d

Remot3d - Un modo semplice per fare exploit Sarà aggiornato presto Remot3d - Uno strumento creato per generare backdoor per controllare e sfruttare un server dove il server esegue il programma PHP Hypertext Preprocessor. Dotato di un backdoor offuscato, il che significa che generalmente dovrebbe...

CVE-2020-14883EXP

CVE-2020-14883EXP Utilizzato per la verifica e lo sfruttamento di WebLogic 10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0. Non usare per scopi illegali. Inserisci IP+porta per iniziare la verifica es. 127.0.0.1:7001 Supporta l'esecuzione di comandi XML remoti Per le versioni diverse d...

CVE-2021-1675

CVE-2021-1675 Modificato da https://github.com/sailay1996/PrintNightmare-LPE, supporta chiamate remote. 1. Carica PrintNightmareLPE.exe e vlib.dll sul server remoto, quindi esegui PrintNightmareLPE.exe. 2. Configura il port forwarding locale: netsh interface portproxy add v4tov4 listenport=31337...

CVE-2024-36104

CVE-2024-36104 Dichiarazione Questo strumento è destinato esclusivamente a scopo di apprendimento e ricerca personale in ambito di sicurezza informatica. Qualsiasi conseguenza o danno, diretto o indiretto, derivante dalla diffusione o dall'utilizzo di questo strumento è di esclusiva responsabilit...

CVE-2024-9570_D-Link-DIR-619L-bof

CVE-2024-9570D-Link-DIR-619L-bof Exploit para CVE-2024-9570 Uma vulnerabilidade foi encontrada no D-Link DIR-619L B1 2.06 e classificada como crítica. Afetada por este problema é a função formEasySetTimezone do arquivo /goform/formEasySetTimezone. A manipulação do argumento curTime leva a um buff...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Crea utente e gruppo exim sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Installa le dipendenze sudo apt-get update sudo apt-get install -y make build-essential...

Log4j-Scanner-Exploit

Log4Shell Scanner Exploit Script in bash che permette di identificare e/o sfruttare la vulnerabilità Log4shell in remoto. Questo strumento esegue diversi test utilizzando payload LDAP e header X-Api-Version, User-Agent e X-Forwarded-For. Utilizzare sempre questo script con autorizzazione preventi...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Descrizione Vulnerabilità nel prodotto Oracle WebLogic Server di Oracle Fusion Middleware componente: Core. Le versioni supportate che risultano vulnerabili sono 12.2.1.4.0 e 14.1.1.0.0. Questa vulnerabilità, facilmente sfruttabile, consente a un attaccante non...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto Exploit di Scrittura su File Questo exploit cerca attraverso le istanze Global Protect URLS e tenta di scrivere file utilizzando CVE-2024-3400 Usare con Cautela Realizzato solo a scopo educativo Utilizzo: root@kitploit: chmod +x gp-exploit.sh ./gp-exploit.sh...

HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass

HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...

iboss Secure Web Gateway - Stored Cross-Site Scripting

A cross-site scripting vulnerability has been found in iboss Secure Web Gateway up to version 10.1. The vulnerability affects the /login file of the Login Portal component, where manipulation of the redirectUrl parameter leads to cross-site scripting. The attack can be launched remotely and the...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

CVE-2025-3248-POC

CVE-2025-3248-POC POC di CVE-2025-3248 esegue qualsiasi comando sulla macchina target uso: python poc.py 'http://xxx.com' 'ls /' lascia un po' di amore sui computer delle vittime poc.py...

cve-2019-1108

Sfruttamento di CVE-2019-1108 root@kitploit: CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the...

PIL-RCE-By-GhostButt

Sfruttare la vulnerabilità di esecuzione di comandi nel modulo Python PIL Attaccare le applicazioni Python sviluppate con PIL e ottenere l'esecuzione remota di comandi. Questo progetto contiene i paper e il codice sorgente e i Dockerfile utilizzati per gli esperimenti. Paper :...