6394 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-88015
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or...
POC-CVE-2025-52970
POC-CVE-2025-52970 root@kitploit: python POC-CVE-2025-52970.py -h usage: POC-CVE-2025-52970.py -h -t TARGET | -l LIST options: -h, --help show this help message and exit -t, --target TARGET Single target URL e.g., https://xx.xx.xx.xx -l, --list LIST Path to file containing target URLs, one per li...
CVE-2026-31431
copyfun 간단한 CVE 2026-31431 익스플로잇 데모 copyfun은 지정된 대상 파일의 캐시를 제공된 페이로드 바이트로 오염시킵니다...
django_sqli_target_CVE-2025-64459
В этом репозитории нет README...
CVE-2020-11546
CVE-2020-11546 SuperWebMailer RCE 사용법 python3 CVE-2020-11546.py -h, --help 도움말 메시지를 표시하고 종료합니다 python3 CVE-2020-11546.py -u https://target.com...
CVE-2024-9933
CVE-2024-9933 使用方法 使用法: python CVE-2024-9933 .py option URL オプション: check : 対象URLが脆弱性を持っているか確認します。 exploit : 提供されたURLに対して脆弱性の悪用を試みます。 例: python CVE-2024-9933 .py check http://example.com python CVE-2024-9933 .py exploit http://example.com...
CVE-2020-14882
CVE-2020-14882 CVE-2020-14882/14883/14750 ИСПОЛЬЗОВАНИЕ 1. клонируйте этот репозиторий 2. установите библиотеку requests 3. python3 14882.py ПРИМЕР root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator ССЫЛКА...
CVE-2022-26134-cve1
CVE-2022-26134RCE インストール root@kitploit: git clone https://github.com/yigexioabai/CVE-2022-26134-cve1.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt CVE-2022-26134RCE.pyをpocsuite3\pocsディレクトリに配置してください cd pocs pocsuite3の使用 単一URL: root@kitploit: pocsuite -r CVE-2022-26134RCE.py -u url...
CVE-2021-41773
CVE-2021-41773 Docker root@kitploit: $ sudo docker build -t . $ sudo docker run -d -t -p 80:80 --name /bin/bash $ sudo docker exec -it ./bin/apachectl -k restart 访问 Docker 容器以修改自定义配置文件 root@kitploit: $ docker exec -it /bin/bash 配置文件位于 /usr/local/apache2/conf/httpd.conf 修改配置后运行命令 $...
CVE-2017-12617
CVE-2017-12617 Обновленная версия этого репозитория: https://github.com/cyberheartmi9/CVE-2017-12617 Обновлено для работы с Python3 Запуск root@kitploit: python3 CVE-2017-12617.py -u http://127.0.0.1 python3 CVE-2017-12617.py --url http://127.0.0.1 python3 CVE-2017-12617.py -u http://127.0.0.1 -p...
CVE-2024-36401-PoC
CVE-2024-36401-PoC 이 저장소는 CVE-2024-36401에 대한 개념 증명PoC 스크립트를 포함합니다. 이 취약점을 악용하면 대상 서버에서 원격 코드 실행이 가능합니다. 기능 Perl을 사용하여 리버스 셸 리스너 할당 Base64를 사용하여 명령어 인코딩 취약점을 악용하기 위해 대상 서버에 요청 전송 시그널 처리를 통해 인터럽트를 원활하게 처리 사전 요구사항 Python 3.x requests 라이브러리 설치 1. 이 저장소를 클론합니다: root@kitploit: git clone...
CVE-2022-26134
CVE-2022-26134 Go で PoC を書く練習 使い方 root@kitploit: go get -u -v github.com/wjlin0/CVE-2022-26134 CVE-2022-26134 -url https://example.com/ コンパイル root@kitploit: git clone https://github.com/wjlin0/CVE-2022-26134 cd CVE-2022-26134 && chmod +x build.sh && ./build.sh...
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode
A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...
horrors-log4shell
horrors-log4shell CVE-2021-44228 log4j를 위한 마이크로 연구실 놀이터? 여러 대상에 대해 페이로드를 실행하는 데 사용할 수 있습니다. 대상별 페이로드는 런타임에 생성됩니다. 조정 가능한 구성 및 우회 방법. 설치 Java 관련 요구사항 개발 / 실행 예제 Gradle Maven 최근 log4j 관련 취약점CVE-2021-44228, CVE-2021-45046을 테스트하려면: JDK 8u121 Ysoserial 컴파일 JAR https://github.com/frohoff/ysoserial 양쪽에서...
CVE-2023-28343
CVE-2023-28343 CVE-2023-28343 POC эксплойт Использование root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST, --localhost LOCALHOST Local IP...
Proxylogon-exploit
Proxylogon-exploit proxylogon 익스플로잇 - CVE-2021-26857 사용법: root@kitploit: python exploit.py...
CVE-2019-5420.rb
CVE-2019-5420.rb POC-эксплойт, написанный на Ruby Вставьте свои cookies из целевого приложения в скрипт и запустите через ruby ./exploit.rb...
cve-2021-29627
CVE-2021-29627 Некоторый код для инициирования ошибки, включая spray macsetfd. Нужна цель для spray, хотя...
xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
Summary Document.createProcessingInstruction in @xmldom/xmldom performs no validation on the target parameter. The requireWellFormed: true serializer option validates only for : in the target and a case-insensitive xml prefix, but does not check for characters. A in the target breaks the processi...
