evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf CVE-2023-28434 的EXP MinIO 未授权到RCE 改动基于 https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 改动了什么？ 添加 cmd/x.go，用于执行系统命令 root@kitploit: package cmd import "os/exec" "runtime" func...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...

CVE-2025-55182-advanced-scanner-

CVE-2025-55182 扫描器 用于检测和利用 Next.js 应用中 CVE-2025-55182（React 服务端组件远程代码执行）的简易命令行工具。 安装 root@kitploit: chmod +x scanner.sh 用法 root@kitploit: 使用默认命令（id）扫描 ./scanner.sh -d example.com 执行自定义命令 ./scanner.sh -d example.com -c "whoami" 使用完整 URL ./scanner.sh -d https://example.com -c "uname -a" 选项 -d,...

cve-2026-63030-lab

CVE-2026-63030 — Laboratorio wp2shell RCE sin autenticación previa en el núcleo de WordPress mediante confusión de rutas por lotes en la API REST + inyección SQL...

CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE

CVE-2026-4040 – Condición de carrera en la subida de archivos que conduce a RCE Código del programa Python Flask root@kitploit: uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads'...

CVE-2026-55200

🚨 CVE-2026-55200 - Critical libssh2 Out-of-Bounds Write Vulnerability 📌 Overview CVE-2026-55200 is a critical memory corruption vulnerability affecting the widely deployed libssh2 library. The flaw arises from improper validation of the SSH packet length field during packet processing, potentiall...

CVE-2026-39047

CVE-2026-39047：爱普生打印机RAW协议漏洞利用框架 仓库： https://github.com/J4ck3LSyN-Gen2/CVE-2026-39047 PoC脚本： poc.py 模拟目标： mockprinter.py 作者： J4ck3LSyN 概述 该框架演示了CVE-2026-39047 漏洞——爱普生多功能打印机（特别是L14150 FL27PB）在处理RAW TCP打印协议（通常端口9100）上的畸形或超大负载时存在的远程缓冲区溢出。 成功利用可导致打印机嵌入式环境中的任意代码执行，实现： 拒绝服务（DoS）/设备崩溃/重启...

react2shell-poc

React2Shell - CVE-2025-55182 概念验证 CVE-2025-55182 的概念验证，这是 React Server Components 中一个严重的未认证远程代码执行漏洞。 CVSS 分数： 10.0（严重） 漏洞 该漏洞存在于 React 的 Flight 协议反序列化器中。通过利用特制负载进行的原型污染（prototype pollution），攻击者可以在受影响的 Next.js 应用程序上实现任意代码执行。 受影响版本 产品| 受影响版本| 已修复版本 ---|---|--- React| 19.0.0 - 19.2.0| 19.0.1, 19.1.2...

CVE-2008-5862-EXPLOIT

CVE-2008-5862 - webcamXP 5.3.2.375 和 5.3.2.410 中的目录遍历漏洞 此仓库包含 CVE-2008-5862 的利用代码，该安全漏洞存在于 webcamXP 5.3.2.375 和 5.3.2.410 build 2132 版本中。该利用代码利用目录遍历缺陷，使远程攻击者能够未经授权访问任意文件并读取其内容。 漏洞描述 CVE-2008-5862 是一个严重的安全漏洞，攻击者可通过操纵 URI 执行目录遍历攻击。通过使用编码的点-点-斜杠序列（%2F），远程攻击者可以绕过访问控制并从目标系统获取敏感信息。 利用详情 该利用代码利用...

CVE-2026-80127

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploi...

CVE-2026-80127

Dell SCG 5.0 (Secure Connect Gateway) is affected by an OS Command Injection vulnerability in both the Appliance and Application editions. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . A high-privileged attacker with remote access could exploit the impr...

EUVD-2026-72487

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploi...

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal RCE python poc.py url php func command node number 示例： python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...

CVE-2026-79642

Dell Secure Connect Gateway (SCG) 5.0 — both Appliance and Application editions — is affected by an Improper Certificate Validation vulnerability. The flaw allows an unauthenticated remote attacker to gain unauthorized access , with low impact on confidentiality, integrity, and availability. The ...

CVE-2026-79642

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

EUVD-2026-72486

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2022-43959

CVE-2022-43959 Bitrix 漏洞 CVE-2022-43959 描述 1C-Bitrix Bitrix24 的 AD/LDAP 连接器模块（版本 23.100.0 之前）中，AD/LDAP 服务器设置内的凭据保护不足，允许远程管理员通过读取 /bitrix/admin/ldapserveredit.php 的源代码发现 AD/LDAP 管理密码。 CVSS 级别| 得分| CVSS| 链接 ---|---|---|--- 中等| 4.9| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N| 链接 复现步骤： 1. 获取 Bitrix...

CVE-2026-79943

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

EUVD-2026-72485

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2026-79943

Dell Secure Connect Gateway (SCG) 5.0 (Appliance and Application) contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote network access could exploit this to achieve a protection mechanism bypass , resulting in low impact to both c...