271154 matches found
rails-PoC-CVE-2016-2098
A Proof of Concept of vulnerability: CVE-2016-2098 University project created by @alejandro-marting where we can check the vulnerability 2096 Using: rails 4.2.5.1 view has a vulnerable code app/views/poc/render1.html.erb !...
CVE-2023-43838
CVE-2023-43838 An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. Additional Information 1. Create alert.svg with the following content: root@kitploit:...
CVE-2020-9484
CVE-2020-9484 Reference Authored by redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + I just analyzed 1-day exploit. then remodeled. Description Compared to the before PoC, it has the following advantages. + Environment Script for Ubuntu 18.04. + You can ed...
cve-2024-37762
Description MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution. The application offers the possibility of a creation of a form with a file upload functionality. While by default the accepted files are restricted to a common sa...
CVE-2015-8351
gwollebuster this script is exploit for wordpress old plugin gwolle usage: ./gwollebuster.py first arguments = your target url of wordpress that installed gwolle second arguments = your ip third arguments = listening port for reverse shell example: ./gwollebuster.py http://vulnpress.com/...
Awesome-CVE-2021-44228
Awesome-CVE-2021-44228 An awesome curated list of repos for CVE-2021-44228. PoC tangxiaofeng7 https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce christophetd https://github.com/christophetd/log4shell-vulnerable-app jas502n https://github.com/jas502n/Log4j2-CVE-2021-44228...
CVE-2024-52402
š Exploit for CVE-2024-52402: WordPress Exclusive Content Password Protect Plugin -un -p š ļø Options...
CVE-2025-24893
CVE-2025-24893 - XWiki Unauthenticated Remote Code Execution PoC exploit for XWiki Unauthenticated Remote Code Execution Vulnerability CVE-2025-24893. This PoC allows to execute arbitrary commands through Groovy code on SolrSearch Macro. Details root@kitploit: Severity: Critical CVSS Score: 9.8...
DedeCMS-getshell-CVE-2023-2928-
This repository does not have a README...
CVE-2025-24893
CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution Una vulnerabilida de categorĆa RCE Remote Code Execution, encontrada cuando atacantes no autenticados pueden ejecutar codigo Groovy arbitrario remotamente sin la autenticaciĆ³n ni el accesso previo Guest User. A continuaciĆ³n un P...
CVE-2025-51820
CVE-2025-51820 A critical Remote Code Execution RCE vulnerability CVE-2025-51820 has been discovered in the Shopping Portal v1.0. šØ Remote Code Execution in Online Shopping Portal Project v1.0 CVE-2025-51820 š Introduction In todayās digital world, Remote Code Execution RCE remains one of the mos...
CVE-2022-0944_RCE_POC
CVE-2022-0944 Proof of concept exploit for SQLPad RCE CVE-2022-0944 leading to a RCE with a revershell to the attackers PC. Usage root@kitploit: usage: script.py URL IP PORT positional arguments: URL URL to SQLPad IP Listener host address for reverse shell PORT Listener port for reverse shell...
CVE-2020-0688
CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: root@kitploit: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python...
Project-Exploitation-of-Webmin-Authentication-Vulnerability
Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...
rConfig_rce
rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...
CVE-2025-50460
CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...
CVE-2025-50461
CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...
CVE-2016-010033-010045
CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...
CVE-2018-7600
Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...
CVE-2018-7600-Remote-Code-Execution
Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...