1010609 matches found
FOXCMS-CVE-2025-29306-POC
FOXCMS Parameter Injection RCE โ CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection โ Code...
PIRATE
PIRATE Python Remote Acces Tool Usage 1- run payloader.py to generate client script 2- run pirate.py to manage server and receive connection Features Open remote shell Take screenshot Take webcam picture Run keylogger Windows persistence Send and receive files Open windows messagebox Usage Exampl...
cve-2025-24893-poc
CVE-2025-24893 โ XWiki Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-24893 , a critical unauthenticated Remote Code Execution vulnerability in XWiki. This exploit abuses a Groovy template injection in the SolrSearch endpoint to execute arbitrary commands โ including reverse shells...
CVE-2022-29078
THM Challenge: SSTI RCE...
CVE-2023-30092
CVE-2023-30092 All Details about CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Software Link: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Vulnerability Type: SQL Injection Affected Component: QTY Parameter Impact Denial of Service:...
CVE-2026-94127
When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth...
CVE-2026-94127 BIG-IP APM OAuth vulnerability
When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth...
CVE-2026-95675
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...
CVE-2026-95499
A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function moveuploadedfile of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted upload. The attack can be executed remotely. The vendor was...
CVE-2021-34371.jar
CVE-2021-34371.jar CVE-2021-34371.jar from https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371/rhinogadget USE EXP...
certsync
certsync certsync ๆฏไธ็ง็จไบ่ฟ็จๅฏผๅบ NTDS ็ๆฐๆๆฏ๏ผไฝ่ฟๆฌกไธไฝฟ็จ DRSUAPI ๏ผๅฎๅฉ็จ้ป้่ฏไนฆๅUnPAC the hashใ ๅ ถๅทฅไฝๅไธบไปฅไธๅ ไธชๆญฅ้ชค๏ผ 1. ไป LDAP ๅฏผๅบ็จๆทๅ่กจใCA ไฟกๆฏๅ CRL 2. ๅฏผๅบ CA ่ฏไนฆๅ็ง้ฅ 3. ไธบๆฏไธช็จๆท็ฆป็บฟไผช้ ่ฏไนฆ 4. ๅฏนๆฏไธช็จๆทๆง่ก UnPAC the hash๏ผไปฅ่ทๅ nt ๅ lm ๅๅธ root@kitploit: $ certsync -u khal.drogo -p 'horse' -d essos.local -dc-ip 192.168.56.12 -ns 192.168.56.12...
CVE-2019-7609-KibanaRCE
CVE-2019-7609-KibanaRCE Minor changes were made to the CVE to make it compatible with Python 3. cve-modific.py Here are the modifications: In the getkibanaversion function, the line match = re.findallpattern, r.content was updated to match = re.findallpattern, r.text. This change was made to use...
follina-msdt-threat-investigation
Follina โ CVE-2022-30190 Threat Analysis Microsoft MSDT Remote Code Execution zero-day โ active exploitation investigation by MUHAMMAD ZAWAR KHATTAK ๐ View Full Writeup โ ๐งช Scenario On a Friday evening, the team was alerted with a new RCE vulnerability actively being exploited in the wild. I was...
CVE-2026-48908-joomla-sp-page-builder-detection
CVE-2026-48908 โ Joomla SP Page Builder Validation and Detection Laboratory validation of CVE-2026-48908 in the Joomla SP Page Builder component, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in which the SP...
CVE-2024-8963
CVE-2024-8963 Ivanti Cloud Services Appliance - Path Traversal Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality...
CVE-2018-16167
Installation and Execution Sequence 0. LogonTracer Installation Download the logontracer version 1.2.0, where a vulnerability was found, from dockerhub. root@kitploit: $docker pull jpcertcc/docker-logontracer:v1.2.0 1. LogonTracer Execution Launch it in a container with the following command...
CVE-2020-1971
CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...
CVE-2026-56291
Auto Scanning Version & Exploit CVE-2026-56291 POC Joomla Unauthenticated Arbitrary File Upload leading to RCE in Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...
CVE-2020-23583
CVE-2020-23583 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" REMOTE CODE EXECUTION found in "OPTILINK OP-XT71000N". The issue occurs when the attacker sends an arbitrary code on "/diagpingadmin.asp" to "PingTest" interface that leads t...
CVE-2021-42171
CVE-2021-42171 File upload to Remote Code Execution on Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 root@kitploit: Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...