cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass two method given to get flag's content: 1. copy it from host into container's mounted dir; 2. use reverse shell to get it;...

php-8.1.0-dev-exploit

php-8.1-dev-Exploit ⚠️ Important read first This repository contains a Java proof-of-concept PoC intended for CTF / lab use only. Do not run this code against systems you do not own or do not have explicit written permission to test. Unauthorized exploitation is illegal. Use only in isolated...

Log4Shell-CVE-2021-44228-ENV

Log4Shell Reproduction Environment Example Description Victim machine IP: 47.47.47.47 Attacker machine IP: 48.48.48.48 Running the Vulnerable Docker on the Victim Machine Use the DockerFile to build the docker image and run: root@kitploit: docker build . -t vuln docker run -p 8080:8080 --name vul...

CVE-2016-6662

CVE-2016-6662 From SQL injection to root shell with CVE-2016-6662 by MaYaSeVeN Proof of Concept: https://www.youtube.com/watch?v=lyc7GFE3q2U...

CVE-2024-48990-POC

CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...

vsftpd2.3.4PyExploit

vsftpd2.3.4PyExploit An exploit to get root in vsftpd 2.3.4 CVE-2011-2523 written in python Usage: ./exploit.py $VictimIPaddress Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume wha...

CVE-2021-3156-plus

CVE-2021-3156 This is a warehouse modification based on @CptGibbon and supports arbitrary command execution. 相关阅读：CVE-2021-3156 - Exploit修改 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on : @CptGibbon Ubuntu 20.04 against sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 Al...

CVE-2025-24813-POC

JSP Web Shell Uploader A simple Python tool for uploading a basic JSP web shell to one or more targets via HTTP PUT requests. ⚠️ For educational and authorized penetration testing only. Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../...

CVE-2026-35867

A command injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library affects the LB-LINK router AC1900_AZ2 V1.0.2 . The flaw allows an attacker on the adjacent network to inject shell metacharacters via a POST /goform/set_LimitClient_cfg request, even without administr...

CVE-2026-35867

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of the LB-LINK router AC1900AZ2 V1.0.2 via shell metacharacters, if the device is deployed in a scenario where an actor is able to make a "POST /goform/setLimitClientcfg" call but does not...

PT-2026-90837

A high severity remote code execution flaw in Spug through version 3.4.0 enables authenticated users with monitor permissions to execute arbitrary commands on the host system. Key Points: CVE-2026-90770 affects Spug versions up to and including 3.4.0 with a CVSS score of 8.8. The vulnerability...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2023-000605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000605 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C...

CVE-2026-27626-POC

CVE-2026-27626: OliveTin password-argument command injection OliveTin lets an admin define "actions": shell commands with parameterized arguments that users can trigger from a web UI or API. Before templating a user-supplied value into the shell command, OliveTin is supposed to run it through...

CVE-2026-50979

CVE-2026-50979: Authenticated Remote Code Execution in oPanel Overview CVE ID: CVE-2026-50979 Product: oPanel Affected Versions: v1.19.50 and earlier Vulnerability Type: Authenticated Command Injection / Remote Code Execution RCE Vulnerable Component: /advanced/curl endpoint Severity: Critical...

CVE-2020-0796

CVE-2020-0796 Working Exploit PoC CVE-2020-0796 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0796-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

CVE-2026-33017-Exploit

Fireflow RCE Exploit Remote Code Execution for Langflow via the buildpublictmp endpoint. Exploit via Public Flow Build Endpoint that executes a reverse shell on the target. Requirements Python 3.8+ httpx library Install: root@kitploit: pip install httpx Usage root@kitploit: python exploit.py -u -...

CVE-2025-31644

CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP The “file” parameter of the “save” command is vulnerable to a command injection attack, allowing an authenticated attacker with administrator privileges to the “/mgmt” web API or the SSH “tmsh” shell, to obtain remote code execution...

xwiki-15.10.8-reverse-shell-cve-2025-24893

CVE-2025-24893 Reverse Shell Exploit for XWiki Disclaimer: This script is intended for educational purposes and authorized security testing only. Do not use on systems you do not own or have explicit permission to test. Misuse can be illegal and dangerous. Description This Python script exploits...

CVE-2022-37706

CVE-2022-37706 The CVE-2022-37706 vulnerability is related to the Enlightenment window manager, specifically the enlightenmentsys binary. This binary has the SUID Set User ID bit enabled, meaning it can be executed with elevated privileges usually as the root user. Summary: Vulnerability :...

React2Shell

🚀 R2S - Next.js RSC Exploit Framework Advanced Post-Exploitation Framework for Next.js React Server Components RCE Features • Installation • Usage • Commands • Examples 📋 Overview R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components...