996519 matches found
CVE-2023-46747
CVE-2023-46747 Un script de explotación desarrollado para explotar el CVE-2023-46747 que permite la ejecución remota de código sin autenticación en productos f5-BIG-IP. Este es un script destinado a explotar la ejecución remota de código en productos f5-BIG-IP vulnerables. Instalación:...
CVE-2025-49113-nuclei-template
Plantilla de detección de vulnerabilidades de Nuclei - CVE-2025-49113 - Ejecución remota de código posterior a la autenticación en Roundcube ≤ 1.6.10 ID de CVE: CVE-2025-49113 Gravedad: Crítica CVSS 10.0 Descubierto por: Kirill Firsov FearsOff Fecha de divulgación: 1 de junio de 2025 Corregido en...
CNVD-C-2019-48814
CNVD-C-2019-48814 WebLogic wls9-async Deserialization Remote Command Execution Vulnerability Echo PoC for WebLogic Patch update: root@kitploit: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html Vulnerability Reproduction: root@kitploit:...
CVE-2018-7600-Drupal-RCE
CVE-2018-7600-Drupal-RCE...
Flink_RCE
Apache Flink Web Dashboard Unauthorized Access, Uploading Malicious jar Leads to Remote Code Command Execution msf nc python usage: python 02-Flink.py http://10.10.20.100:8081 nc.jar...
CVE-2020-6287_RECON-scanner
Vulnerability Assessment and Indicator of Compromise IoC Scanner for CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver is a critical CVSSv3 10 vulnerability affecting a number of SAP business and technical applications running on top of the SAP NetWeaver Java stack. This...
fastjson-RCE
fastjson-v1.2.47-RCE Vulnerability Reproduction fastjson-1.2.47 == Resource Download: root@kitploit: 下载 http://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.47/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码...
fastjson-1.2.60-rce
Fastjson = 1.2.60 Deserialization Vulnerability By Pass autoType Block List with 2 Gadgets JNDIConfiguration, OracleManagedConnectionFactory Gadgets root@kitploit: 经过测试，命中的4个文件都是可以利用的。 不过其中HikariConfig类就是前文提到的类，在最新版本被加入黑名单，JNDIConnectionPool类在42版本前就被加入黑名单了。 另外的两个类JNDIConfiguration和...
e-cology
Weaver e-cology OA Beanshell Component Remote Code Execution Windows Linux Notes Detect the target system's os.name if the target system is Windows, executing commands such as set requires manually typing cmd.exe /c set Use Unicode to bypass the exec filter on some sites. Payload root@kitploit:...
CVE-2017-1000117
CVE-2017-1000117 Descripción del proyecto Uno de los temas seleccionados para el diseño del curso de seguridad en redes. Reproducción de la vulnerabilidad CVE-2017-1000117 PoC+Exp Git + SSH Resumen de la vulnerabilidad: Nombre de la vulnerabilidad: Vulnerabilidad de inyección de comandos Git ID...
CVE-2019-0708
CVE-2019-0708 Introduction Microsoft has released its monthly security update for May. Included in this month's Patch Tuesday release is CVE-2019-0708, a critical remote code execution vulnerability that could allow an unauthenticated remote attacker to execute remote code on a vulnerable target...
CVE-2026-27654
CVE-2026-27654 NGINX ngxhttpdavmodule Heap Buffer Overflow via sizet Underflow Remote DoS / Potential RCE Description ngxhttpdavcopymovehandler in src/http/modules/ngxhttpdavmodule.c computes the destination URI length by subtracting the location prefix length from the Destination header's URI pa...
CVE-2026-0740
CVE-2026-0740 🧩 Overview CVE-2026-0740 is an unauthenticated arbitrary file upload vulnerability affecting: Ninja Forms File Uploads ≤ 3.3.26 WordPress plugin This flaw allows attackers to upload arbitrary files to the server without authentication, potentially leading to remote code execution RC...
Apache-Log4j2-RCE
Entorno de verificación de RCE de Apache Log4j2 Desde el 2021.12.09 Algunas referencias https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg Configuración del entorno Introducción de paquetes Maven y rangos de versiones vulnerables root@kitploit: org.apache.logging.log4j log4j-api 2.14.1...
CVE-2023-45878
Exploit de Gibbon CMS CVE-2023-45878 Este script de Python explota CVE-2023-45878, una vulnerabilidad de carga arbitraria de archivos sin autenticación en Gibbon CMS versiones 25.0.1 y anteriores, que permite la Ejecución Remota de Código RCE. Descripción de la vulnerabilidad CVE-2023-45878 exist...
CVE-2022-41343
CVE-2022-41343 🐍 Exploit en Python para CVE-2022-41343 Shell inversa por etapas para dompdf 2.0.1 Basado en: el artículo de Positive Sec y PoC Ejemplo root@kitploit: cve-2022-41343 10.10.16.3 44444 Uso root@kitploit: usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional...
CVE-2022-0944
CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage root@kitploit: usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username option...
CVE-2023-25194
CVE-2023-25194 https://hackerone.com/reports/1529790 Poc root@kitploit: POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accep...
CVE-2018-14667_Lab_POC
CVE-2018-14667-Lab POC for the exploitation of CVE-2018-14667 PREREQUISITES Demo App From : http://downloads.jboss.org/richfaces/releases/3.3.X/3.3.4.Final/richfaces-examples-3.3.4.Final.zip Jboss 5.1.0.GA from JBOSS download archive : https://repository.jboss.org/sourceforge/ Jdk-6u45-linux-x64...