112088 matches found
CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5
CVE-2023-34537--- Reflected XSS found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to multipe XSS vulnerabilities. These vulnerabilities could allows remote authenticated attackers to inject arbitrary web script or HTML. This is my third repo. Don't beat me if i didn't explain well...
Shitrix-CVE-2019-19781
Shitrix-CVE-2019-19781 我对利用Shitrix的工作方法 更新于2020年7月21日 - 现在支持多词命令和正斜杠 你需要 curl = 7.42.0 调用方式，例如： ./shitrix.sh target port ls -al...
CVE-2022-46169
CVE-2022-46169 CVE-2022-46169 python CVE-2022-46169.py tageturl...
Microsoft-2024-December-Update-Control
Windows December 2024 Security Patches Audit Script This PowerShell script checks whether the required KB updates for specific security vulnerabilities CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, and CVE-2024-49122 announced in the December 2024 Microsoft security bulletins are installed on...
CVE-2023-34960
ChamiloCVE-2023-34960-EXP Help: root@kitploit: usage: CVE-2023-34960.py -h -u URL -f FILE -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Full URL address http/https -f FILE, --file FILE Batch URL file -c COMMAND, --command COMMAND Execute command, optional...
CVE-2023-34598
CVE-2023-34598 - Gibbon v25.0.0 LFI Exploit This repository contains a Python script that helps identify and exploit a local file inclusion LFI vulnerability CVE-2023-34598 in Gibbon v25.0.0. The script can scan a target website for potential vulnerability and, if successful, download the SQL dum...
cve-2020-5902
NMAP script for F5 BIG-IP "TMUI" RCE Vulnerability Referer:https://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse...
Invoke-LinkSpray
Invoke-LinkSpray Powershell script to create malicious SMB or WebDAV links to steal NTLM authentication. Takes UNC or local folder paths from a file specified by the -ShareList parameter. Optionally, -Depth can be used to specify how many folders to recurse when creating URL files. Also supports ...
Log4j-Scanner-Exploit
Log4Shell-Scanner-Exploit Bash script to remotely identify and/or exploit the Log4j vulnerability. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of the audited...
Bash-Script-CVE-2019-17662
此存储库没有 README。...
CVE-2022-27925
CVE-2022-27925 设置 root@kitploit: git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 使用 root@kitploit: 用法：CVE-2022-2925.py -h -t TARGET -l LIST 选项： -h, --help 显示此帮助信息并退出 -t TARGET, --target TARGET 目标的URL，例如：http://127.0.0.1 -l LIST, --list LIST 以换行符分隔的目标URL列表...
CVE-2019-19393
Rittal CMC PU III – Stored XSS PoC Application: Rittal CMC PU III Web management Devices: CMC PU III 7030.000 Software Revision: From V3.11.002 to V3.15.704 Hardware Revision: From V3.00 to V6.01 Attack type: Stored XSS Solution: Update to Software Revision V3.17.10 or later Summary: Web...
CVE-2026-77605
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...
CVE-2020-1472-Easy
CVE-2020-1472-Easy This is definitely not something you would want to run on anything that you care about. Built from a writeup and work from @obfuscatee and another source Uses code from https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...
monikerlinktest
monikerlinktest cve-2024-21413 1. set up tun0 or other tun on router via openvpn on any ovpn file 2. install remmina if not yet done so 3. RDP to target desktop using remmina on the port your ovpn connected to ip link delete the one that's down if duplicated 4. follow exploit.py command to replac...
CVE-2017-8570
CVE-2017-8570Exp.py Reference:https://github.com/rxwx/CVE-2017-8570 Changes: Usage: root@kitploit: python2 CVE-2017-8570Exp.py -s write.sct -e write.exe -o write.rtf + RTF file written to: write.rtf...
CVE-2017-7269-Echo-PoC
CVE-2017-7269 Remote Code Execution Echo Verification Our team's analysis report on the CVE-2017-7269 vulnerability: https://ht-sec.org/cve-2017-7269-vulnerabilities/ The default PoC only launches calc.exe. Now it has been modified to respond to requests. The command format is:...
Mass-CVE-2023-3460
Mass-CVE-2023-3460 Mass CVE 2023 3460. Usage mass-CVE-2023-3460.py list.txt Credit https://github.com/gbrsh/CVE-2023-3460...
CVE-2026-80152
Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by...