CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE Description This repository contains a Python-based Proof of Concept PoC for CVE-2024-28397, a sandbox escape vulnerability in the Js2Py JavaScript interpreter for Python. When the target application evaluates untrusted JS code via Js2Py, an attacker can break out of the...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Translate Module Remote Code Execution Vulnerability...

CVE-2020-0796-exp

SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my lab environment. It was written quickly and needs some work to be more reliable. Sometimes you BSOD. Using this for any purpose other...

CVE-2024-44871

MoziloCMS = 3.0.1 Authenticated RCE Description This script is an exploit tool designed for testing web applications running MoziloCMS. It allows an attacker to use admin logins to upload a PHP web shell via jpg file, rename the uploaded file to php, and send system commands to the target through...

CVE-2024-2054

CVE-2024-2054 Artica-Proxy administrative web application insecure deserialization RCE An exploit proof of concept for ARTICA PROXY Administrative web application CVE-2024-2054 Blog Post More details here:...

CVE-2024-48061

CVE-2024-48061 Langflow vulnerable to remote code execution CVE-2024-48061 poc Usage root@kitploit: python3 poc.py -i -p -l -lp Description This script exploits a vulnerable API endpoint at /api/v1/validate/code on the target web server. It first verifies the presence of the vulnerable path, then...

CVE-2022-1388

CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...

CVE-2024-4879

CVE-2024-4879 ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024–4879, CVE-2024–5217, and CVE-2024–5178, affec...

CVE-2017-5638-ApacheStruts2.3.5

CVE-2017-5638-ApacheStruts2.3.5 A exploit for CVE-2017-5638. This exploit works on versions 2.3.5-2.3.31 and 2.5 – 2.5.10 Requirements optparse, requests Usage This exploit can be used like this: root@kitploit: $ python3 CVE-2017-5638ApacheStruts.py -u...

CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR Labs c 2018 Details this proof of concept exploit targets Safari 11.0.3 13604.5.6 on macOS 10.13.3 17D47 versions only. compile the payload of your choice as a dylib with a constructor run python filetojsarray.py your.dylib payload.js...

CVE-2024-25600-Bricks-Builder-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2026-31816

CVE-2026-31816 - Budibase Authentication Bypass to RCE CVE-2026-31816 is a critical authentication and authorization bypass vulnerability affecting Budibase. The vulnerability exists in the server-side authorization middleware responsible for protecting API endpoints. Budibase attempts to identif...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679. FIRST: I AM NOT RESPONSIBLE FOR WHAT YOU DO WITH IT. SECOND: apt-get install parallel curl...

Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

El objetivo de este proyecto era realizar una auditoría de seguridad de un blog lanzado recientemente por Ackme Support Incorporated, identificando cualquier vulnerabilidad crítica antes de que el sitio se hiciera público. La tarea implicaba encontrar una forma de ejecutar código de forma remota ...

Added-Pentest-Ground-to-vulnerable-websites-for-training

https://vulners.com/cve/CVE-2017-0089 Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from...

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

CVE-2023-50164Analysis-

CVE-2023-50164: Aplicación Vulnerable de Apache Struts Se encontró una vulnerabilidad de seguridad crítica, identificada como CVE-2023-50164 CVE: 9.8 en Apache Struts, que permite a los atacantes manipular parámetros de carga de archivos, lo que potencialmente puede llevar a un traversal de ruta ...

CVE-2021-41773

CVE-2021-41773 PoC y Laboratorio para CVE-2021-41773 Configurar Laboratorio root@kitploit: $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC root@kitploit: RCE curl...

CVE-2023-0297

CVE-2023-0297 RCE in pyload prior to 0.5.0b3.dev31. Disclaimer: This script lead to unauthorized access or control of a remote system; only use it if you have explicit permission from the system owner before proceeding...

CVE-2024-22198_Checker

CVE-2024-22198 - ejecución remota de código autenticado en Nginx-ui Descripción Esta herramienta está diseñada para comprobar de forma remota la versión de Nginx-ui y notificar si es vulnerable a CVE-2024-22198. Nginx-UI es una interfaz web para gestionar configuraciones de Nginx. Es vulnerable a...