CVE-2015-1635-POC

CVE-2015-1635-POC, MS15-034 HTTP.sys HTTP.sys is the kernel driver for Microsoft Windows that handles HTTP requests. It was introduced from IIS6.0 to optimize IIS server performance, and the IIS service process depends on HTTP.sys. The HTTP.sys remote code execution vulnerability is essentially a...

CVE-2017-1000353

CVE-2017-1000353 POC How to reproduce the Jenkins CVE-2017-1000353？ Clone this repository, use the pre-built payload jenkinspoc.ser with flowing command: root@kitploit: python exploit.py http://your-ip:8080 jenkinspoc.ser Then the touch /tmp/success would be executed. Java Version Requirements...

CVE-2024-37084

CVE-2024-37084 Spring Cloud Remote Code Execution...

log4shell-test-exploit

CVE-2021-44228 log4shell का परीक्षण शोषण तैयारी root@kitploit: Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git cd...

cve-2021-41773

Apache 2.4.49 - اجتياز المسار أو تنفيذ الأوامر عن بُعد cve-2021-41773.py هو سكربت بايثون يساعد في اكتشاف ثغرة اجتياز المسار أو تنفيذ الأوامر عن بُعد في Apache 2.4.49. تم توفير نسخة ضعيفة من Docker للتجربة العملية على CVE-2021-41773 إذا تم تفعيل CGI-BIN، فيمكننا تنفيذ الأوامر عن بُعد ولكن ليس اجتي...

CVE-2016-6210

CVE-2016-6210 User name enumeration against SSH daemons affected by CVE-2016-6210. Use against your own hosts only! Attacking stuff you are not permitted to may put you in big trouble! INSTALATION Clone the Repository: root@kitploit: git clone https://github.com/coolbabayaga/CVE-2016-6210.git cd...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

ShockZaum-CVE-2014-6271

CVE-2014-6271 शेलशॉक कमजोरी पर हमला करने की स्क्रिप्ट root@kitploit: ! Usage: ./ShockZaum -u 'https://nasa.gov' -c 'rm -rf /' -p '/cgi-bin/aliens.cgi'...

CVE-2019-19781-CitrixRCE

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781 References: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ बायपास करना: 1 - /vpn/../vpns/portal/scripts/ पर हटाई गई/संशोधित स्क्रिप्ट्स 2 - perl commnad injection टेम्पलेट इंजेक्शन हमले क...

CVE-2019-2729

...

CVE-2023-46805

शीर्षक: CVE-2023-46805 के लिए प्रूफ ऑफ कॉन्सेप्ट - केवल शैक्षिक उपयोग के लिए लाइसेंस: यह कार्य क्रिएटिव कॉमन्स एट्रिब्यूशन 4.0 अंतर्राष्ट्रीय लाइसेंस CC BY 4.0 के अंतर्गत रखा गया है। आप इस कार्य को साझा करने, कॉपी करने, वितरित करने और प्रसारित करने, इसे अनुकूलित करने या अन्य उद्देश्यों के लिए उपय...

CVE-2021-34481

CVE-2021-34481 التحقق من التصحيح الخاص بـ CVE-2021-34481 ثغرة تنفيذ التعليمات البرمجية عن بُعد في Windows Print Spooler https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481...

CVE-2026-84438

OpenCart 4.1.0.3 and 4.1.0.4 are affected by a stored cross-site scripting (XSS) vulnerability in the Autocomplete Workflow component, specifically in the file catalog/controller/account/edit.php. The vulnerability is triggered through manipulation of the firstname argument, allowing a remote, au...

EUVD-2026-69801

A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/controller/account/edit.php of the component Autocomplete Workflow. This manipulation of the argument firstname causes cross site scripting. The attack can be initiated remotely. The...

CVE-2026-84438 OpenCart Autocomplete Workflow edit.php cross site scripting

A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/controller/account/edit.php of the component Autocomplete Workflow. This manipulation of the argument firstname causes cross site scripting. The attack can be initiated remotely. The...

CVE-2022-47966-Scan

CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE simple poc...

CVE-2024-32002-hook

CVE-2024-32002-hook CVE-2024-32002-hook...

CVE-2022-35405

CVE-2022-35405 My blog post Nuclei template Other article ManageEngine PAM360 and Password Manager Pro unauthenticated remote code execution vulnerability PoC Access Manager Plus authenticated only :...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? root@kitploit: $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3...