996219 matches found
Exploit-For-CVE-2022-36067
Exploit-For-CVE-2022-36067 This repo contains payload for the CVE-2022-36067 How to exploit? Paste the payload given in payload.js along with the command you want to run. Test on local machine. To test on local machine, git clone the repo, install the dependecies and run app.js using node. If the...
CVE-2023-42819
CVE-2023-42819 CVE-2023-42819 Vulnerability Description JumpServer Arbitrary File Write Vulnerability CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. Place the script and required files in the same directory 2. Ensure Google Chrome is installed, and obtain its version number root@kitploit: re...
CVE-2026-79644
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
CVE-2026-79644
Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Certificate Validation vulnerability affecting the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00). An unauthenticated attacker with remote network access could potentially exploit this flaw to gain...
EUVD-2026-72453
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
PS4-6.20-WebKit-Code-Execution-Exploit
PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...
CVE-2026-33032
CVE-2026-33032 Safe check reads nginx status root@kitploit: python3 main.py http://target:9000 --tool nginxstatus List configs root@kitploit: python3 main.py 10.0.0.50 --tool nginxconfiglist Destructive demo writes + reloads root@kitploit: python3 main.py http://target:9000 \ --tool nginxconfigad...
BlueGate
BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...
EUVD-2026-72452
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...
CVE-2026-79645
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access could exploit this to gain unauthorized access , resultin...
CVE-2026-79645
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...
CVE-2023-20887
CVE-2023-20887 Exploit VMWare vRealize Network Insight Pre-Authenticated RCE CVE-2023-20887 Usage root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l...
unomi_exploit
Disclaimer The vulnerability detection methods, files, and other content provided here are strictly limited to use by security professionals under legal authorization, for the purpose of testing the security of authorized servers. Security professionals must comply with legal regulations and are...
rschunter
RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...
ripple20-digi-connect-exploit
Exploit Ripple20: Digi Connect ME 9210 Autores: Moshe Kol, Shlomi Omeran Este repositorio contiene un PoC de explotación para CVE-2020-11896, una vulnerabilidad crítica de desbordamiento de búfer en el montón en la pila TCP/IP de Track parte del conjunto de vulnerabilidades Ripple20. El exploit...
CVE-2020-13945-EXPLOIT
CVE-2020-13945 - Apache APISIX Remote Code Execution RCE This repository contains a proof-of-concept PoC exploit for a vulnerability in Apache APISIX. The vulnerability arises when the Admin API is enabled and the access IP restriction rules are deleted, allowing the default token to access APISI...
CVE-2024-7627-PoC
CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...
CVE-2026-78480
This vulnerability affects Dell Secure Connect Gateway (SCG) 5.0 , specifically Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . The issue is a Missing Authentication for Critical Function , allowing an unauthenticated remote attacker to gain unauthorized acce...
EUVD-2026-72451
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...
CVE-2026-78480
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...