CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Exploit - Buffer Overflow Vulnerability This repository contains a Python script that exploits a buffer overflow vulnerability in the TOTOLINK AC1200 T8 version v4.1.5cu.861B20230220 in the setWiFiAclRules function via the desc parameter. Vulnerability Details...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

cve-2023-46747

CVE-2023-46747 Exploit Script This script exploits the F5 BIG-IP TMUI remote code execution vulnerability CVE-2023-46747. It allows an unauthenticated attacker to execute arbitrary commands on a vulnerable F5 BIG-IP system. Table of Contents Features Requirements Usage Parameters How It Works...

CVE-2024-46377

CVE-2024-46377 Best House Rental Management System 1.0 में मनमानी फ़ाइल अपलोड भेद्यता के लिए PoC अवलोकन यह Python स्क्रिप्ट Best House Rental Management System 1.0 में मनमानी फ़ाइल अपलोड भेद्यता का फायदा उठाने का तरीका प्रदर्शित करती है। यह भेद्यता एक हमलावर को एक दुर्भावनापूर्ण फ़ाइल जैसे कि PHP...

SMB-LINUX-CVE-2025-37899

लिनक्स कर्नेल के ksmbd में Use-After-Free भेद्यता CVE-2025-37899 विवरण लिनक्स कर्नेल के ksmbd मॉड्यूल में एक use-after-free प्रकार की भेद्यता खोजी गई है, जो नेटवर्क पर फ़ाइल साझाकरण के लिए SMB सर्वर मैसेज ब्लॉक प्रोटोकॉल के कार्यान्वयन के लिए जिम्मेदार है। यह भेद्यता, जिसे CVE-2025-37899 के रूप म...

MultiExploit

Multi-Service Vulnerability Scanner Supported Vulnerabilities & Attack Vectors Microsoft SQL Server Vulnerabilities CVE-2023-21173 : Remote Code Execution in SQL Server 2022 Potential exploitation of: Weak authentication configurations Misconfigured server principals xpcmdshell abuse Advanced...

nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 कुछ डीबग नोट्स और शोषण अंधा नहीं Exploit Burpsuite का उपयोग करें, अनुरोध में ls / -al को संशोधित करें, ध्यान दें कि दोहरे उद्धरण चिह्न एकल उद्धरण चिह्नों से बदल दिए जाएंगे root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintosh; Inte...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 एक्सप्लॉइट POC CVE-2023-35078 रिमोट अनप्रमाणित API एक्सेस भेद्यता Ivanti Endpoint Manager Mobile EPMM में पाई गई है, जिसे पहले MobileIron Core के नाम से जाना जाता था। यह भेद्यता सभी समर्थित संस्करणों – संस्करण 11.4 रिलीज़ 11.10, 11.9 और 11.8 को प्रभावित करती है। पुराने संस्करण/रिली...

CVE-2026-84437

A cross-site scripting (XSS) vulnerability affects OpenCart 4.1.0.3 and 4.1.0.4 , specifically in the Autocomplete Workflow component within the file catalog/controller/account/address.php. Manipulating the address_1 argument allows a remote, authenticated (low-privilege) attacker to inject scrip...

CVE-2026-84437 OpenCart Autocomplete Workflow address.php cross site scripting

A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address1 results in cross site scripting. It is possible to launch the...

EUVD-2026-69799

A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address1 results in cross site scripting. It is possible to launch the...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell, and Auto-Export PCAP -- FOR EDUCATIONAL USE ONLY -- The author is not responsible or held liable for any actions taken with any aspect of this project/repository. I created this for the purposes of understanding the attack as well as writing detections within a...

PoC_CVE-2019-10149--rce

About Remote Command Execution into shell from a vulnerable exim service. Vulnerable versions go from 4.87 to 4.91 inclusive. Check https://nvd.nist.gov/vuln/detail/cve-2019-10149. The following script is based on Qualys PoC. Check...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

log4j2-rce-poc

Log4j2 RCE Vulnerability POC A bare minimum proof-of-concept for Log4j2 JNDI Remote-Code-Execution vulnerability CVE-2021-44228. This is intended for educational purposes to help people who are not security researchers to understand how it works and how large the impact is. The POC bypasses the...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate यह POC Spring / Hibernate का उपयोग करता है, हालाँकि rmi - deserialization का समान दृष्टिकोण किसी भी deserialization भेद्यता को ट्रिगर करने के लिए उपयोग किया जा सकता है। संक्षेप में root@kitploit: $ docker-compose up $ curl -X POST -H 'Content-Type:...

CVE-2024-10542

CVE-2024-10542 और CVE-2024-10781 का PoC: CleanTalk प्लगइन = 6.43.2 में Spam protection, AntiSpam, FireWall में Broken Authentication अस्वीकरण Disclaimer: इस दस्तावेज़ में CVE-2024-10542 के संबंध में दी गई जानकारी केवल सीखने और शैक्षिक उद्देश्यों के लिए है। हम इस जानकारी के किसी भी हानिकारक...

EUVD-2026-69796

ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger...