-CVE-2022-1609

CVE-2022-1609 CVE-2022-1609的Bash PoC WordPress Weblizar后门 如何安装？ root@kitploit: wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 如何使用？ root@kitploit: GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 + Targeting http://127.0.0.1:8080 ...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repositorio para la tarea de prueba de la pasantía. Paso 0: Clonar este repositorio git root@kitploit: git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Paso 1: Crear contenedores Docker Iniciar el demonio Docker root@kitploit: sudo systemctl start...

CVE-2022-1609

CVE-2022-1609 针对 CVE-2022-1609 WordPress Weblizar 后门的 Bash poc 如何安装 ？ root@kitploit: wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 如何使用 ？ root@kitploit: NullBrunk$ ./exploit.sh http://127.0.0.1:8080 + Targeting http://127.0.0.1:808...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

CVE-2020-8816

防御此漏洞的注意事项 补丁 立即执行...就现在。 订阅/关注 Pi-hole 仓库 以获取新版本（如果你认真对待，也要关注 Issues 和 Pull requests）。 网络 不要将 Pi-hole 暴露到互联网。 仅将 Pi-hole DNS 端口 53 暴露给 DNS 客户端，不要暴露其他端口如管理界面。 管理 对管理员账户使用唯一且复杂（意为多字符）的密码短语。 CVE-2020-8816 完整的PoC可在PDF文档中查看 这是针对 Pi-hole 4.3.2 RCE 的 PoC...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Mode Of Use root@kitploit: ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE Un usuario autenticado con privilegios bajos puede explotar una vulnerabilidad de inyección de comandos para lograr ejecución de código como www-data y escalar privilegios a root debido a reglas sudo débiles. QuickBox Pro v2.1.8 y versiones anteriores son...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 Fallo de Copia PoC en PHP root@kitploit: www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php...

CVE-2020-11108-PoC

CVE-2020-11108-PoC En este repositorio hay dos PoCs. cve-2020-11108-rce.py te dará una shell como el usuario www-data. root-cve-2020-11108-rce.py te dará una shell y escalará privilegios a root. Nota: Esto es destructivo, ya que debemos sobrescribir teleporter.php. Para una explicación...

zoneminder-rce-poc

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

CVE-2026-55676

Malcolm’s file-upload PHP backend allows unrestricted uploads: an empty allow-list means any extension is accepted, and the filename sanitizer preserves .php. Uploaded files land under /var/www/upload/server/php/files and are served via nginx to php-fpm, enabling an authenticated GET to execute t...

CVE-2026-55676

Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...

PT-2026-70903

Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...

Unraid < 7.3.0 Multiple Command Injection Vulnerabilities (ZDI-26-385 / ZDI-26-386)

The remote host is running a version of Unraid prior to 7.3.0. It is, therefore, affected by multiple vulnerabilities: - A command injection vulnerability exists in the FileUpload.php file due to the lack of proper validation of a user-supplied string before using it to execute a system call. An...

EUVD-2026-39108

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within FileUpload.php. T...

CVE-2026-9773

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within ToggleState.php...

CVE-2026-9772 Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within FileUpload.php. T...

PT-2026-52119

Name of the Vulnerable Software and Affected Versions Unraid Web Server affected versions not specified Description A command injection flaw in the FileUpload.php file allows authenticated remote attackers to execute arbitrary code in the context of the www-data user. The issue is caused by...

EUVD-2026-23942

Vvveb CMS v1.0.8 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. Attackers can exploit this logic flaw by first...

CVE-2026-6257 Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management

Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. Attackers can exploit this logic flaw by firs...