cve-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

Vulnerability-Assessment-Exploitation-Lab

Vulnerability-Assessment-Exploitation-Lab Metasploitable 2 Penetration Testing Lab Executive Summary This project documents a successful, full-lifecycle penetration test against the Metasploitable 2 Linux environment. The assessment follows the Penetration Testing Execution Standard PTES , coveri...

Roundcube_CVE-2025-49113

RCE in Roundcube CVE-2025-49113 - My Obsidian note .md date time Status: Completed Lab: Easy Tags: RCE | PHP | LABTHM | EXPLOIT | CVE by KRPT Paulo G. Werneck - Linkedin - in.com/pgw-script Impact : remote command execution post-login CVSS 9.9 Affected versions : ≤ 1.5.10 / 1.6.10 Patched : 1.5.1...

CVE-2021-44228-Log4j-JNDI

Access After the project starts, visit: http://127.0.0.1:9090/vul Vulnerability Reproduction JDK version: java8u92 Avoid using too high a version; it is recommended to use the same as mine, as higher versions have certain restrictions on JNDI injection root@kitploit: java -jar...

Pickle-Deserialization-Exploit-in-Transformers

Exploiting Pickle Deserialization Vulnerability in Transformers Experiment Introduction Introduces the pickle deserialization mechanism and its reduce attack principle, reproduces the deserialization vulnerability CVE-2024-3568 in the Hugging Face Transformers library, analyzes security risks in...

TIC4301_Project

TIC4301Project TIC4301 Project - CVE-2021-40444 Download the following vagrant boxes: Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNtmU2/view?usp=sharing Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing Import the boxes with the...

CVE-2023-22527

CVE-2023-22527 - Atlassian Confluence Remote Code Execution Overview CVE-2023-22527 is a critical remote code execution vulnerability in Atlassian Confluence Data Center and Server. This vulnerability allows unauthenticated attackers to execute arbitrary code on vulnerable Confluence instances...

CVE-2025-34299-lab

CVE-2025-34299 Test Environment Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Authentication Remote Code Execution vulnerability. Vulnerability Details...

CVE-2022-26809-RCE

CVE-2022-26809-RCE Este repositorio contiene un PoC para la ejecución remota de código CVE-2022-26809 Esto es una prueba, no funciona...

CVE-2023-30253-Exploit

CVE-2023-30253 Exploit Dolibarr vulnerable to remote code execution via uppercase manipulation Affected version 17.0.1 Usage: pip3 install -r requirements.txt python3 CVE-2023-30253.py...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Affected Versions 'PaperCut MF or NG version 8.0 or later excluding patched versions on all OS platforms.' Summary This POC uses an authentication bypass vulnerability chained with abuse of builtin scripting functionality to execute...

CVE-2025-24813-Apache-Tomcat-RCE-PoC

CVE-2025-24813 Apache Tomcat RCE PoC Description This is a Proof of Concept PoC for CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability arises from unsafe deserialization of crafted session files uploaded via HTTP PUT requests, allowing attackers to execu...

Blackash-CVE-2025-32023

CVE-2025-32023 - Redis Remote Code Execution RCE 🚨 🧠 Overview: A critical RCE vulnerability affecting Redis 7.2.4, where attackers can load malicious modules using the MODULE LOAD command. 🕳️ Vulnerability Type: Remote Code Execution RCE 💥 Impact: An unauthenticated attacker can execute arbitrary...

activemq-cve-2023-46604

Active MQ CVE-2023-46604 exploit This repository is a guide with examples on how to exploit the CVE-2023-46604 The exploit takes advantage of the usage of reflection for instantiating Exception classes through a malicious command that instead of being a valid command, it sends as the exception...

check-point-gateways-rce

Check Point Security Gateways RCE by element.security Tested against R81.10 T335, R80.40 T294 Usage example: python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 Research blog post: Check Point Security Gateways RCE via CVE-2021-40438...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352 is a critical stack overflow flaw in Cisco IOS/IOS XE's SNMP engine. With just crafted SNMP packets, remote attackers can crash systems or seize root control. All SNMP versions are vulnerable patch now or risk total...

CVE-2025-24893

CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform Example usage: Setup a netcat listener: root@kitploit: $ nc -nvlp Then run the script: root@kitploit: $ chmod +x cve.sh $ ./cve.sh Affected versions: From 5.4 up to 15.10.11 From 16.0.0 up to 16.4.1 Disclamer This tool is for...

SMBGhost

SMBGhost Batch test CVE-2020-0796 - SMBv3 RCE...

CVE-2022-35411

rpc.py 0.6.0 - Remote Code Execution RCE Exploit fixed by: Liquidsky...

CVE-2024-2667

InstaWP Connect – 1-click WP Staging & Migration You can use any valid or invalid API Key. overridepluginzip - Path to the zip file which contains malicious WordPress Plugin with a backdoor. Once imported you can access the backdoor via...