271208 matches found
CVE-2024-52402
π Exploit for CVE-2024-52402: WordPress Exclusive Content Password Protect Plugin -un -p π οΈ Options...
CVE-2025-24893
CVE-2025-24893 - XWiki Unauthenticated Remote Code Execution PoC exploit for XWiki Unauthenticated Remote Code Execution Vulnerability CVE-2025-24893. This PoC allows to execute arbitrary commands through Groovy code on SolrSearch Macro. Details root@kitploit: Severity: Critical CVSS Score: 9.8...
DedeCMS-getshell-CVE-2023-2928-
This repository does not have a README...
CVE-2025-24893
CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution Una vulnerabilida de categorΓa RCE Remote Code Execution, encontrada cuando atacantes no autenticados pueden ejecutar codigo Groovy arbitrario remotamente sin la autenticaciΓ³n ni el accesso previo Guest User. A continuaciΓ³n un P...
CVE-2025-51820
CVE-2025-51820 A critical Remote Code Execution RCE vulnerability CVE-2025-51820 has been discovered in the Shopping Portal v1.0. π¨ Remote Code Execution in Online Shopping Portal Project v1.0 CVE-2025-51820 π Introduction In todayβs digital world, Remote Code Execution RCE remains one of the mos...
CVE-2022-0944_RCE_POC
CVE-2022-0944 Proof of concept exploit for SQLPad RCE CVE-2022-0944 leading to a RCE with a revershell to the attackers PC. Usage root@kitploit: usage: script.py URL IP PORT positional arguments: URL URL to SQLPad IP Listener host address for reverse shell PORT Listener port for reverse shell...
CVE-2020-0688
CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: root@kitploit: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python...
Project-Exploitation-of-Webmin-Authentication-Vulnerability
Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...
rConfig_rce
rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...
CVE-2025-50460
CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...
CVE-2025-50461
CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...
CVE-2016-010033-010045
CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...
CVE-2018-7600
Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...
CVE-2018-7600-Remote-Code-Execution
Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...
CVE-2025-66478
CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...
PoC-CVE-2015-10141-Xdebug
PoC-CVE-2015-10141 Custom Python exploit for Xdebug β€ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...
RemoteMouse-3.008-RCE
CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax root@kitploit: python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address...
CVE-2016-0792
Exploit for Jenkins serialization vulnerability - CVE-2016-0792 https://www.exploit-db.com/exploits/42394/ More information can be found here 1. Contrast Security 2. Pentester Lab Requirements 1. Python 3.6.x 2. requests library is required for this exploit to work sudo pip install requests Usage...
CVE-2024-42327_Zabbix_SQLi
π‘οΈ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. β οΈ DISCLAIMER: This...
zoneminder_CVE-2023-26035
Exploit - ZoneMinder CVE-2023-26035 There is a Unauthenticated Remote Code Execution RCE affecting ZoneMinder Snapshots. This is an exploit for CVE-2023-26035. Affected versions ZoneMinder 1.36.33 and ZoneMinder 1.37.33. Usage Check if the target is vulnerable: root@kitploit: python3 zoneminder.p...