CVE-2026-20841

CVE-2026-20841 - Windows 메모장 원격 코드 실행 RCE 보안 연구 및 기술 분석 저장소 ⚠️ 이 저장소는 교육, 방어 및 연구 목적으로만 제공됩니다. 📖 개요 CVE-2026-20841 은 Microsoft Windows 메모장의 Markdown 처리 기능에 영향을 미치는 심각한 원격 코드 실행RCE 취약점입니다. 공격자는 취약한 버전의 Windows 메모장에서 특수하게 조작된 파일을 열 경우 임의 코드 실행을 유발할 수 있습니다. 영향 원격 코드 실행 RCE 임의 코드 실행 사용자 수준 손상 가능성 보안 경...

CVE-2025-3248

CVE-2025-3248 — Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features 🔓 Remote & unauthenticated RCE 🔐 No authentication required 🐍 Python3 one-liner script 🎨 Colorized terminal...

CVE-2023-41892

CVE-2023-41892 - Craft CMS Remote Code Execution RCE referensi: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2023-36845

CVE-2023-36845 用法？ bash cve.sh yourfile.txt Referensi: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...

CSPOC

Cobalt Strike 存储型XSS RCE CVE-2022-39197 运行参数： -u: Cobaltstrike http监听的地址，如 http://127.0.0.1:8500 -p: Payload，如 不宜过长 演示： 打包命令：go build -ldflags "-s -w" QQ 群： 点击加入：528118163 加群 / 合作 / 联系（左） | 公众号：遮天实验室（右）...

CVE-2022-0543

CVE-2022-0543 1.Introduction Redis Sandbox Escape Vulnerability CVE-2022-0543 POC&EXP 2.Usage root@kitploit: RedisRCE -help 查看帮助信息 RedisRCE -h 192.168.0.100:6379 无密码连接 //输入q退出程序 RedisRCE -h 192.168.0.100:6379 -p 123456 密码连接 3.Disclaimer This tool is only for learning, research, and self-checking...

CVE-2020-27955

CVE-2020-27955 Vulnerability Reproduction 1. Download the vulnerable version of Git-LFS on the Windows machine Download link: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2. Install on the Windows machine, add the following information to the hosts file. 10.1.1.5 is the...

CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability Summary SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts e.g., web shells and gain remote code execution. CVE ID : CVE-2024-8232 Vendor :...

CVE-2017-9805

Test nuclei CVE-2017-9805.yaml - struts2 showcase RCE 构建 Dockerfile docker build -t cve-2017-9805 . 启动并分离容器 docker run --name cve-2017-9805 -p 127.0.0.1:8080:8080 -dit cve-2017-9805 /bin/bash 登录到运行中的容器 docker exec -it cve-2017-9805 /bin/bash 启动 Tomcat $CATALINAHOME/bin/startup.sh...

CVE-2018-11235

CVE-2018-11235 はじめに Docker コンテナをビルドするには、次を使用します： root@kitploit: make docker 以下の make コマンドは、お使いのマシンの異なるターミナルで並行して実行してください 攻撃者サーバーのコンテナを起動するには、次を使用します： root@kitploit: make runserver 被害者を表すコンテナを起動するには、次を使用します： root@kitploit: make runclient コンテナは client.py スクリプトを起動します。このスクリプトは、自身の IP...

CVE-2023-0669-Analysis

CVE-2023-0669 This Repo contain the pcakages and scripts used in this Analysis https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-goanywhere The vulnerable version of GoAnywhere for Linux https://www.dropbox.com/s/j31l8lgvapbopy3/ga703linuxx64.sh?dl=0...

CVE-2022-45701

CVE-2022-45701 Arris Router Firmware 9.1.103 - Remote Code Execution RCE Authenticated POC Exploit...

CVE-2025-61882

Oracle E-Business Suite RCE Scanner CVE-2025-61882 A fast, multi-threaded bulk scanner for detecting CVE-2025-61882 in Oracle E-Business Suite installations. This critical vulnerability allows unauthenticated remote code execution. 🎯 Features Bulk Scanning - Process hundreds or thousands of...

CVE-2019-16113

CVE-2019-16113 This is a python implementaiton PoC for the Bludit Directory Traversal Image File Upload Vulnerability CVE-2019-16113 Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg or .png file name, and then this PHP code...

CVE-2023-24871

CVE-2023-24871 This repository contains materials related to CVE-2023-24871, which I covered in this series of posts. You'll find more info inside the specific folders, since the vulnerability allowed both RCE & LPE...

CVE-2017-11610

Supervisord Remote Command Execution Vulnerability Script CVE-2017-11610 Vulnerability Overview Supervisor is a process management tool written in Python, which can be used to start, restart auto-restart programs, and stop processes not just Python processes on UNIX-like systems Windows is not...

CVE-2022-26134-cve1

CVE-2022-26134RCE Installation root@kitploit: git clone https://github.com/yigexioabai/CVE-2022-26134-cve1.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2022-26134RCE.py放到pocsuite3\pocs目录下 cd pocs Using pocsuite3 Single URL: root@kitploit: pocsuite -r CVE-2022-26134RCE.py -u ur...

CVE-2023-45158

CVE-2023-45158 Steps 1. Run the webserver root@kitploit: cd web2py python3 web2py.py 2. Inject your command using the URL http://:8000/hack?msg=%27%3B%3B%27. Replace and with your values. Examples 1. Create a file on the server http://:8000/hack?msg=%27%3Btouch%20hack%3B%27 2. Reverse shell On th...

CVE-2020-15778

CVE-2020-15778 Introduction This repo reproduces CVE-2020-15778. Steps 1. Build the docker images for scp server and client root@kitploit: cd client docker build -t client-cve . root@kitploit: cd server docker build -t server-cve . 2. Spin up the scp server in container. root@kitploit: docker run...