CVE-2024-7399-POC

CVE-2024-7399 Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Usage: root@kitploit: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3 CVE-2024-7399.py...

EUVD-2026-79671

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...

CVE-2026-83319

Oracle BI Publisher (component: Web Service API ) in Oracle Analytics version 12.2.1.4.0 is vulnerable to an easily exploitable flaw allowing a low-privileged attacker with network access via SOAP to compromise the product. Due to a scope change , attacks originating in BI Publisher may significa...

CVE-2026-83314

CVE-2026-83314 affects the Web Service API component of Oracle BI Publisher (part of Oracle Analytics), versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via SOAP can exploit this vulnerability with low complexity to achieve unauthorized creation, d...

EUVD-2026-79666

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...

EUVD-2026-79626

The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access...

frp

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

VeilTransfer

VeilTransfer 2.0 VeilTransfer is a data exfiltration utility designed to test and enhance detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allowing organizations to evaluate and improve their security posture. By leveraging multip...

Nanobrok

Nanobrok Web Service Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in...

EUVD-2026-78820

Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...

CVE-2023-23752-EXPLOIT

CVE-2023-23752 - Joomla Improper Access Check An issue has been identified in Joomla versions 4.0.0 through 4.2.7. This vulnerability relates to an improper access check within the application, enabling unauthorized access to critical webservice endpoints. Proof of Concept PoC A Proof of Concept...

CVE-2021-40906

CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...

cve-2017-10271-poc

CVE-2017-10271 POC Introduction This is an autotest poc for CVE-2017-10271. Having been tested on CentOS 7 and Windows 7/10. Building This project is written in rust language. You need to install rust environment from https://www.rust-lang.org/ first and then build the project with the following...

satellite

satellite Satellite는 요청을 필터링하여 올바른 대상이 페이로드를 받도록 보장하는 웹 페이로드 호스팅 서비스입니다. 매우 특정한 상황에서만 접근해야 하는 파일을 호스팅하는 데 유용한 서비스이기도 합니다. 빠른 시작 가이드 1. Ubuntu에서 .deb 파일을 사용하여 satellite 설치 dpkg -i satelliteX.X.Xlinuxamd64.tar.gz 2. 제공할 파일 생성 echo 'It worked!' /var/www/html/index.html 3. index.html의 필터링 파일 생성 echo ...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we'd like it to be. Basic functionality is available at this point and more advanced...

CVE-2018-2636

설치 root@kitploit: $ pip install --user requests argparse unicodedata 정보 CVE-2018-2636에 대한 PoC. 사용 예시 root@kitploit: python eGw.py -H 127.0.0.1 -P 8080 -i ... 서버 정보를 얻는 중 ! 인스턴스가 CVE-2018-2636에 취약합니다 ... 링크 Oracle Critical Patch Update Advisory January 2018 - CVE-2018-2636 Oracle Micros POS가 다시...

CVE-2021-40438

CVE-2021-40438 build root@kitploit: docker build -t cve-2021-40438:1.0 . run root@kitploit: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 root@kitploit: ./main.sh...

CVE-2022-0332

CVE-2022-0332 Moodle 3.11 to 3.11.4 - SQL injection POC root@kitploit: GET...

CVE-2021-42913

CVE-2021-42913 Samsung Printer SCX-6X55X 不適切なアクセス制御 Samsung Printer SCX-6x55X Series SyncThru Web Service は、不適切なアクセス制御の脆弱性の影響を受けます。 この脆弱性により、攻撃者はSMBユーザーとパスワードのリストにアクセスできる可能性があります。...

CVE-2023-34924

CVE-2023-34924 H3CMagicB1STV100R012 라우터의 버퍼 오버플로 취약점 CVE 정보: root@kitploit: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed version: none • the CVE ID for the entry if possible...