CVE-2022-35405

CVE-2022-35405 我的博客文章 Nuclei 模板 其他文章 ManageEngine PAM360 和 Password Manager Pro 未认证远程代码执行漏洞 PoC 仅 Access Manager Plus 需认证 :\ 产品名称| 受影响版本| 默认端口 ---|---|--- PAM360| 5.5 5500 及以下| 8282 Password Manager Pro| 12.1 12100 及以下| 7272 Access Manager Plus 需认证| 4.3 4302 及以下| 9292 某些自定义安装使用端口 80 或 443。 用法：...

CVE-2022-22965-poc

CVE-2022-22965 利用工具 CVE-2022-22965 利用工具，支持反弹 Shell 和密码认证。 欢迎添加更多功能 : 如何测试？ root@kitploit: $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 运行有漏洞的 Docker 容器 $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py --help 查看更多用法 致谢 我重构了原始利用代码并添加了一些功能 变更 支持反弹...

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 漏洞利用 - 缓冲区溢出漏洞 本仓库包含一个 Python 脚本，该脚本利用 TOTOLINK AC1200 T8 （版本 v4.1.5cu.861B20230220）中 setWiFiAclRules 函数通过 desc 参数存在的缓冲区溢出漏洞。 漏洞详情 漏洞类型 ：缓冲区溢出 受影响函数 ：setWiFiAclRules 受影响版本 ：TOTOLINK AC1200 T8 v4.1.5cu.861B20230220 影响 ：攻击者可以利用此漏洞执行任意代码或使设备崩溃。 功能特性 载荷自定义...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

cve-2023-46747

CVE-2023-46747 利用脚本 此脚本利用 F5 BIG-IP TMUI 远程代码执行漏洞 CVE-2023-46747 。它允许未认证的攻击者在易受攻击的 F5 BIG-IP 系统上执行任意命令。 目录 特性 环境要求 使用方法 参数 工作原理 免责声明 特性 未认证用户创建： 在目标系统上生成一个用户。 令牌获取： 使用创建的用户获取认证令牌。 远程命令执行： 在目标系统上执行任意 shell 命令。 环境要求 Python 3.8+ 模块： argparse binascii json random requests time urllib3 使用 pip 安装缺失的模块：...

CVE-2024-46377

CVE-2024-46377 针对 Best House Rental Management System 1.0 中任意文件上传漏洞的 PoC 概述 该 Python 脚本演示了如何利用 Best House Rental Management System 1.0 中的任意文件上传漏洞。该漏洞允许攻击者上传恶意文件（例如 PHP Web Shell）并在目标服务器上执行任意命令。 使用方法 1. 克隆仓库并进入目录： root@kitploit: git clone https://github.com/yourusername/house-rental-poc.git cd...

SMB-LINUX-CVE-2025-37899

Use-After-Free Vulnerability in Linux Kernel's ksmbd CVE-2025-37899 Description A use-after-free vulnerability has been discovered in the ksmbd module of the Linux kernel, responsible for implementing the SMB Server Message Block protocol for network file sharing. This vulnerability, identified a...

MultiExploit

多服务漏洞扫描器 支持的漏洞与攻击向量 Microsoft SQL Server 漏洞 CVE-2023-21173 ：SQL Server 2022 中的远程代码执行 潜在利用： 弱认证配置 错误配置的服务器主体 xpcmdshell 滥用 高级选项操作 常见漏洞类别 1. 认证绕过 弱/默认凭据 空密码尝试 错误配置的认证机制 2. 服务枚举 FTP 匿名访问 开放的数据库端口 暴露的服务信息 3. 潜在攻击面 MSSQL 远程命令执行 FTP 信息泄露 网络服务指纹识别 目标服务 Microsoft SQL Server FTP 服务 Windows 远程管理 WinRM...

nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Algunas notas de depuración y exploit no ciego Exploit Usa burpsuite, modifica ls / -al en la petición; ten en cuenta que las comillas dobles se reemplazarán por comillas simples root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintos...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron Core. This vulnerability impacts all supported versions – Version 11.4 releases 11.10, 11.9 and 11.8. Older...

CVE-2026-84437

A cross-site scripting (XSS) vulnerability affects OpenCart 4.1.0.3 and 4.1.0.4 , specifically in the Autocomplete Workflow component within the file catalog/controller/account/address.php. Manipulating the address_1 argument allows a remote, authenticated (low-privilege) attacker to inject scrip...

CVE-2026-84437 OpenCart Autocomplete Workflow address.php cross site scripting

A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address1 results in cross site scripting. It is possible to launch the...

EUVD-2026-69799

A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address1 results in cross site scripting. It is possible to launch the...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell, and Auto-Export PCAP -- FOR EDUCATIONAL USE ONLY -- The author is not responsible or held liable for any actions taken with any aspect of this project/repository. I created this for the purposes of understanding the attack as well as writing detections within a...

PoC_CVE-2019-10149--rce

About Remote Command Execution into shell from a vulnerable exim service. Vulnerable versions go from 4.87 to 4.91 inclusive. Check https://nvd.nist.gov/vuln/detail/cve-2019-10149. The following script is based on Qualys PoC. Check...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

log4j2-rce-poc

Log4j2 RCE Vulnerability POC A bare minimum proof-of-concept for Log4j2 JNDI Remote-Code-Execution vulnerability CVE-2021-44228. This is intended for educational purposes to help people who are not security researchers to understand how it works and how large the impact is. The POC bypasses the...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate This POC uses Spring / Hibernate, however a similar approach of rmi - deserialization could be used to trigger any deserialization vulnerability TL;DR root@kitploit: $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-bina...