phpunit-brute

phpunit-brute Tool to try multiple paths for PHPunit RCE CVE-2017-9841 and it will log found paths to found.txt in the dir. It uses the following list of paths https://raw.githubusercontent.com/random-robbie/bruteforce-lists/master/phpunit.txt if you have a path that is not on there please submit...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase Pre-auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91105

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91104

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-73456

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology Unauthenticated RCE via dubboApi Debug Endpoint -critical TL;DR Weaver E-cology 10.0 prior to build 20260312 contains a critical unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint. Attackers can injec...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

CVE-2021-42013-LAB

CVE-2021-42013-LAB Apache HTTP Server 2.4.50 - RCE Lab exploit.sh :- https://github.com/jas9reet/CVE-2021-42013-LAB/blob/main/exploit.sh Usage docker pull jas9reet/cve-2021-42013-lab docker run -dit -p 8088:80 jas9reet/cve-2021-42013-lab Vulnerable Application Access VICTIM-IP-ADDRESS :8088...

zoneminder-snapshots-rce-poc

Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...

CVE-2026-63325

@redocly/respect-core and @redocly/cli (Redocly CLI) before version 2.33.0 contain an arbitrary code execution vulnerability in the respect command. The root cause is dynamic evaluation of $faker runtime expressions in Arazzo descriptions: a crafted expression can traverse constructor , prototype...

proxylogscan

proxylogscan This tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin CVE-2021-26855. By chaining this bug with another post-auth arbitrary-file-write vulnerability to get code execution...

Laravel-debug-Checker

Laravel-debug-Checker CVE-2021-3129 Checker By ./MrMad Refrence : https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 install module root@kitploit: python -m pip install -r requirements.txt installation on linux root@kitploit: git clone...

CVE-2015-5254

CVE-2015-5254 ActiveMQ Deserialization RCE 0x01 sure port 61616 is open nmap -p 61616 -Pn -T5 -n -sC -sV 10.10.20.166 root@kitploit: root@kali: nmap -p 61616 -Pn -T5 -n -sC -sV 10.10.20.166 Starting Nmap 7.70 https://nmap.org at 2019-08-30 02:05 EDT Nmap scan report for 10.10.20.166 Host is up...

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities in HP Linux Imaging and Printing (HPLIP) software. The findings affect several software components and could potentially enable remote code execution , privilege escalation , denial of service , information disclosure ,...

CVE-2026-73456

Arista EOS platforms with the gNPSI (gRPC Network Packet Sampling Interface) enabled are vulnerable to unauthenticated arbitrary code execution via crafted gNPSI requests (CWE-94, code injection), granting full administrative control of the switch. CVSS 3.1 score: 10.0 . Exploitation requires gNP...

CVE-2026-73456 Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised...