983 matches found
test-task-CVE-2024-25600
test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo root@kitploit: git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon root@kitploit: sudo systemctl start docker.service Start Docker...
CVE-2021-41773-PoC
CVE-2021-41773-PoC 🚀 使用方式 root@kitploit: ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION 此脚本仅用于教育目的和授权渗透测试。 未经明确许可在系统上不当使用此工具属违法行为。 作者对可能造成的滥用不承担任何责任。...
QuickBox-Pro-2.1.8-Authenticated-RCE
QuickBox-Pro-2.1.8-Authenticated-RCE 已认证的低权限用户可以利用命令注入漏洞，以 www-data 身份实现代码执行，并凭借薄弱的 sudo 规则将权限提升至 root。 QuickBox Pro v2.1.8 及更早版本存在漏洞。...
copy-fail-CVE-2026-31431-php
CVE-2026-31431（复制失败）PHP PoC root@kitploit: www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php...
LyLme-Spage - Arbitary File Upload
An arbitrary file upload vulnerability in the component /include/file.php of lylmespage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file. id: CVE-2024-34982 info: name: LyLme-Spage - Arbitary File Upload author: DhiyaneshDk severity: high description: | An arbitrary...
Citrix SD-WAN Center - Local File Inclusion
Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...
QCube Cross-Site-Scripting
A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...
WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution
WordPress XML Sitemap Generator for Google plugin before 2.0.4 contains a cross-site scripting vulnerability that can lead to remote code execution. It does not validate a parameter which can be set to an arbitrary value, thus causing cross-site scripting via error message or remote code executio...
CVE-2025-51471-POC
CVE-2025-51471 - Exposición de Token entre Dominios de Ollama - PoC Autor: ajtazer 🔥 Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-51471 , una vulnerabilidad de Exposición de Token de Autenticación entre Dominios que afecta a todas las versiones de Ollama incluyendo l...
CVE-2020-11108-PoC
CVE-2020-11108-PoC 本仓库包含两个PoC。cve-2020-11108-rce.py 会以www-data用户身份为你提供一个shell。root-cve-2020-11108-rce.py 会为你提供一个shell并提升权限至root。注意：此操作具有破坏性，因为我们必须覆盖teleporter.php。 如需完整的解释/分析，请参阅此篇博客文章。...
-CVE-2022-1609
CVE-2022-1609 CVE-2022-1609 WordPress Weblizar バックドア用 Bash PoC インストール方法 root@kitploit: wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 使用方法 root@kitploit: GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 + Targeting...
CVE-2022-1609
CVE-2022-1609 CVE-2022-1609 WordPress Weblizar Backdoor の Bash poc インストール方法 ? root@kitploit: wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 使用方法 ? root@kitploit: NullBrunk$ ./exploit.sh http://127.0.0.1:8080 + Targeting...
CVE-2020-8816
防御此漏洞的注意事项 补丁 立即执行...就现在。 订阅/关注 Pi-hole 仓库 以获取新版本（如果你认真对待，也要关注 Issues 和 Pull requests）。 网络 不要将 Pi-hole 暴露到互联网。 仅将 Pi-hole DNS 端口 53 暴露给 DNS 客户端，不要暴露其他端口如管理界面。 管理 对管理员账户使用唯一且复杂（意为多字符）的密码短语。 CVE-2020-8816 完整的PoC可在PDF文档中查看 这是针对 Pi-hole 4.3.2 RCE 的 PoC...
zoneminder-rce-poc
just wait and see Proof of concept per una vulnerabilità di injection di comandi OS nella funzionalità di esportazione eventi di ZoneMinder web/includes/downloadfunctions.php. I nomi dei monitor vengono interpolati direttamente nei comandi shell utilizzando un wrapping manuale con apici singoli...
Malicious code in @demopack/www (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65caef119676a35e0ed5c3ef5a3be0d08c6a487c57270c802319fe68521dadd Package.json describes the package as 'Static assets distribution', but the shipped HTML/JS is an iOS-version-gated payload loader. js/index.js...
CVE-2026-55676
Malcolm’s file-upload PHP backend allows unrestricted uploads: an empty allow-list means any extension is accepted, and the filename sanitizer preserves .php. Uploaded files land under /var/www/upload/server/php/files and are served via nginx to php-fpm, enabling an authenticated GET to execute t...
CVE-2026-55676
Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...
PT-2026-70903
Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...
CVE-2026-50630
A flaw was found in apache-cxf. This vulnerability, known as a Carriage Return Line Feed CRLF injection, allows an attacker to manipulate HTTP response headers. By injecting special characters into the 'realm' parameter of the WWW-Authenticate header, an attacker can add arbitrary HTTP headers or...
