CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

CVE-2018-15473

CVE-2018-15473 OpenSSH 7.7 - 用户名枚举 方法 攻击者可以使用畸形数据包（例如截断的数据包）尝试认证用户，并且： 如果用户无效（不存在），则 userauthpubkey 立即返回，服务器向攻击者发送 SSH2MSGUSERAUTHFAILURE； 如果用户有效（存在），则 sshpktgetu8 失败，服务器调用 fatal 并关闭与攻击者的连接。 用法 库的使用非常简单，只需几行代码即可 root@kitploit: python --port --userlist 受影响系统 Redhat Enterprise Linux 7 Redhat...

CVE-2019-8449

CVE-2019-8449 CVE-2019-8449 Exploit for Jira Releases Below v8.3.4 CVSS Score: 5.0 Vulnerability Types: Information Disclosure Authentication: Not Required Affected Versions: 2.1 - 8.3.4 Publish Date: 2019-09-11 Exploit-DB: https://www.exploit-db.com/exploits/47990 Description The...

CVE-2021-4191-EXPLOIT

CVE-2021-4191 - GitLab 用户枚举 GitLab 是一款广泛使用的基于 Web 的 DevOps 生命周期工具，提供 Git 仓库管理器，并集成持续集成、问题跟踪、代码审查等功能。GraphQL API 是一个强大的接口，允许用户以编程方式与 GitLab 交互并执行各种操作。 GitLab CVE-2021-4191 漏洞源于特定版本 GitLab 的 GraphQL API 中用户枚举的疏忽。启用了注册限制的私有 GitLab 部署实例可能受到此问题的影响。...

CVE-2022-40684

CVE-2022-40684 One-click enumeration of all usernames and writing SSH public key Integrated and optimized the code from these two repositories to achieve one-click enumeration of all usernames and writing SSH public key results: https://github.com/carlosevieira/CVE-2022-40684/blob/main/exploit.py...

CVE-2021-40353

CVE-2021-40353 CVE-2021-40353 openSIS 8.0 SQL Injection Vulnerability https://vulners.com/cve/CVE-2021-40353 A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the USERNAME...

CVE-2025-47812-poC

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE-2025-47812 to run commands and get a reverse shell. For educational use only. Vulnerability Details This security vulnerability was publicly disclosed and detailed by RCESecurity...

CVE-2026-86306

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

CVE-2026-86306

light0011 CMS , a PHP-based content management system hosted on GitHub, is affected by an improper authentication flaw in the Cookie Helper component. The vulnerability resides in the file App/Home/Model/UserModel.class.php and is triggered by manipulating the Username argument. Because the flaw ...

CVE-2026-86306 light0011 cms Cookie Helper UserModel.class.php improper authentication

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

EUVD-2026-72397

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

CVE-2018-15473-Exploit

CVE-2018-15473-Exploit On August 15th, 2018, the following advisory was posted on the OSS-Security list: http://openwall.com/lists/oss-security/2018/08/15/5 The ShelIntel team decided to invest some time and write an exploit for this vulnerability. The exploit below has the following features:...

CVE-2025-47812

CVE-2025-47812 This is a Proof of Concept PoC of the Wing FTP Server Exploit CVE-2025-47812 Description Wing FTP Server versions prior to 7.4.4 suffered a Remote Code Execution RCE vulnerability as a result of the insecure treatment of the username parameter. When we are allowed to login in the...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 用户名路径遍历概念验证 此仓库包含针对 CVE-2026-36227 的良性概念验证代码，该漏洞是 Easy Chat Server 3.1 用户注册处理中的路径遍历问题。 此仓库仅用于授权的安全研究和本地复现。请勿将其用于你不拥有或未经明确许可测试的系统。 概述 Easy Chat Server 3.1 通过 POST /registresult.htm 接受注册数据。UserName 参数在被应用程序使用前未经过充分净化。一个类似 ../../ecs-traversal-proof.txt...

Noregressh

最初我想构建一个 regreSHHion 扫描器和利用工具。 随后我向其中添加了额外的 CVE。 如果有人能帮助我扩展项目的某些部分，请与我联系。 欢迎使用 NOREGRESSH Norregressh 是一个专注于 OpenSSH 回归漏洞和多个 CVE 的渗透测试框架。 它包含发现、 定向利用工作流、 监听器管理 以及后渗透辅助功能， 系统监视器显示 IP、 检查端口是否开放、 监听器辅助工具， 仅在获得明确授权的情况下使用。 祝您破解愉快！ 由我使用 AI 编写。 快速开始 root@kitploit: Clone the repo git clone...

CVE-2025-63498

Alinto/SOGo cookie中的存储型XSS 研究者: Daniil Khomichenok, Alexander Klimenko 受影响版本 var cookieUsername = "[email protected]'123'"; var language = 'English'; var loginHint = '' 接受 XSS 注入作为参数值的登录 remember set-cookie 代码： root@kitploit: if rememberLogin response addCookie: self cookieWithUsername:...

CVE-2026-86265

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/ustransac.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-86265 itsourcecode Sales and Inventory System us_transac.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/ustransac.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-86265

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/us_transac.php , triggered by manipulation of the Username argument. The attack can be launched remotely and requires low privileges (authentication), with no user interaction needed. Per the CVS...

CVE-2011-2523-exploit

CVE-2011-2523 利用 vsFTPd 2.3.4 后门 本项目演示了使用 Python 和 pwntools 对 vsFTPd 2.3.4 后门漏洞 CVE-2011-2523 的利用。 免责声明： 本项目仅用于教育和授权渗透测试目的。严禁在未经许可的情况下对系统使用。 漏洞概述 CVE ID: CVE-2011-2523 受影响的软件: vsFTPd 2.3.4 类型: 后门 / 远程命令执行 端口: 21 FTP, 6200 后门 Shell 👉 存在漏洞的 vsFTPd 版本包含一个恶意后门，当登录时使用的用户名包含 : 时会被触发。 利用原理 1. 连接到目标 FTP...