CVE-2021-40906

CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...

frp

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

VeilTransfer

VeilTransfer 2.0 VeilTransfer is a data exfiltration utility designed to test and enhance detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allowing organizations to evaluate and improve their security posture. By leveraging multip...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we'd like it to be. Basic functionality is available at this point and more advanced...

CVE-2023-23752-EXPLOIT

CVE-2023-23752 - Joomla 不当访问检查 已在 Joomla 4.0.0 至 4.2.7 版本中发现一个问题。该漏洞与应用程序内的不当访问检查有关，从而允许未经授权地访问关键的 Web 服务端点。 概念验证（PoC） 已提供演示此漏洞的概念验证（PoC）。请注意，此 PoC 仅供教育目的使用，不应以任何未经授权的方式使用。在未经适当授权的情况下针对系统使用它属于违法行为！ 免责声明 本 PoC 严格仅供教育目的和道德安全研究使用。在未经明确许可的情况下，针对任何系统使用它均属非法且不道德的行为。...

CVE-2022-0332

CVE-2022-0332 Moodle 3.11 to 3.11.4 - SQL injection POC root@kitploit: GET...

CVE-2018-2636

Install root@kitploit: $ pip install --user requests argparse unicodedata Info POC for CVE-2018-2636. Usage example root@kitploit: python eGw.py -H 127.0.0.1 -P 8080 -i ... Let's get info about server ! Your instance is vulnerable to CVE-2018-2636 ... Links Oracle Critical Patch Update Advisory...

cve-2026-41679

CVE-2026-41679 Introduction This POC tests if a paperclip ai instance is vulnerable for CVE-2026-41679. It follows the steps of found in this article. Usage Execute the following commands: root@kitploit: git clone [email protected]:bartfroklage/cve-2026-41679.git cd cve-2026-41679 python3 -m...

CVE-2021-42913

CVE-2021-42913 Samsung Printer SCX-6X55X Improper Access Control Samsung Printer SCX-6x55X Series SyncThru Web Service is affected by an improper access control vulnerability. The vulnerability can permit an attacker to gain access to a list of SMB users and passwords...

CVE-2021-40438

CVE-2021-40438 build root@kitploit: docker build -t cve-2021-40438:1.0 . run root@kitploit: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 root@kitploit: ./main.sh...

CVE-2023-34924

CVE-2023-34924 A buffer over flow vulnerability of H3CMagicB1STV100R012 router CVE info: root@kitploit: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed version: none • the CVE ...

CVE-2024-7399-POC

CVE-2024-7399 Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Usage: root@kitploit: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3 CVE-2024-7399.py...

WSSAT

WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...

Nanobrok

Nanobrok Servicio Web Servicio Web escrito en Python para controlar y proteger tu dispositivo Android de forma remota. La aplicación oficial se puede encontrar en PlayStore: NanobrokPro Nanobrok Community Descripción general Nanobrok-Server es un potente servicio web de código abierto para...

cve-2017-10271-poc

CVE-2017-10271 POC Introduction This is an autotest poc for CVE-2017-10271. Having been tested on CentOS 7 and Windows 7/10. Building This project is written in rust language. You need to install rust environment from https://www.rust-lang.org/ first and then build the project with the following...

CVE-2023-23752

CVE-2023-23752 Description This repository contains Python and Bash scripts that serve as ports of the original Proof of Concept PoC written in Ruby for the vulnerability CVE-2023-23752 in Joomla! CMS versions 4.0.0 through 4.2.7 made by 'noraj' Alexandre ZANNI. An access control flaw was...

satellite

satellite Satellite は、リクエストをフィルタリングして正しいターゲットがペイロードを取得できるようにする、Webペイロードホスティングサービスです。また、非常に特定の状況でのみアクセスされるべきファイルをホストするための便利なサービスにもなります。 クイックスタートガイド 1. Ubuntu で .deb ファイルを使用して satellite をインストール します dpkg -i satelliteX.X.Xlinuxamd64.tar.gz 2. 提供するファイルを作成します echo 'It worked!' /var/www/html/index.html ...

cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

CVE-2026-83319

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...

CVE-2026-83314

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...