CVE-2026-90444

CVE-2026-90444 describes a shell metacharacter injection vulnerability in a file-transfer interface within an ICS/OT product (per CISA advisory ICSA-26-254-01). The interface requires valid credentials but does not restrict shell metacharacters in uploaded filenames. An automated process later co...

CVE-2026-90444

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

CVE-2026-90444

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

CVE-2023-45878-POC

CVE-2023-45878-POC CVE-2023-45878 poc para Gibbon LMS en XAMPP Windows. Sube una webshell llamada shell.php para inyección de comandos. Para reverse shell, sube un script ps1 de PowerShell reverse shell llamado shell.ps1 que se carga en la máquina objetivo usando shell.php. Requisitos Python3...

Exploit for CVE-2026-85706

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated a...

cve-2018-1207

cve-2018-1207 利用 iDRAC 7 & 8 固件 2.52.52.52 描述 Dell EMC iDRAC7/iDRAC8 在 2.52.52.52 之前的版本中存在 CGI 注入漏洞，该漏洞可用于执行远程代码。远程未认证攻击者可能能够利用 CGI 变量来执行远程代码。 此代码应导致 iDRAC 服务以 root 用户身份打开一个反向 shell。 用法 启动本地监听器： nc -v -l -p localport nc -v -l -p 5500 运行漏洞利用程序： python ./cve-2018-1207.py remotehost remoteport...

CVE-2025-1974-go

Exploit CVE-2025-1974 with a single file. Usage: root@kitploit: 1. change serverip and serverport in shell.c 2. make 3. GOOS=linux go build -ldflags="-w -s -extldflags "-static"" -trimpath main.go 4. run main in your controlled pod...

CVE-2026-4480-exploit-poc

Usage: For anonymos login: python3 exploit.py --lhost --lport -t -N it is for anonymous login Login via credentials: python3 exploit.py --lhost --lport -t -u -p root@kitploit: ! Error: the following arguments are required: -s/--sharename Note: if user is anonymous and no password, then just add -...

CVE-2025-10230

CVE-2025-10230: Samba 关键 RCE 漏洞 CVSS 10.0 漏洞摘要 CVE-2025-10230 是一个关键的远程代码执行 RCE 漏洞，已在 Samba 代码库中隐匿了 13 年。 该漏洞存在于 WINS（Windows Internet Name Service）注册数据包的处理过程中。当 Samba 配置为域控制器，启用 wins support = yes 并在 wins hook 中定义了脚本时，它未能对接收到的 NetBIOS 名称进行净化。 未认证的攻击者可以发送包含 shell 元字符（例如 command）的恶意名称注册数据包，这些字符会直接传...

CVE-2026-38526

CVE-2026-38526 - Krayin CRM RCE Description PoC script for critical vulnerability in Krayin CRM v2.2.x allowing authenticated RCE via unrestricted file upload. Usage root@kitploit: Web shell python3 exploit.py -u http://target.com -e [email protected] -p password123 Reverse shell python3...

CVE-2026-63766_exploit

CVE-2026-63766 — Inyección de comandos del sistema operativo sin autenticación en GPT-SoVITS Ejecución remota de código sin autenticación en la interfaz web de Gradio de GPT-SoVITS webui.py. Las utilidades de procesamiento de audio openasr, openslice, opendenoise, openuvr5 interpolan los valores ...

CVE-2025-46271-Reverse-Shell-PoC

CVE-2025-46271-Reverse-Shell-PoC Disclaimer This repository is for educational purposes only. The information provided here is intended to help developers understand the vulnerability and protect their systems. Do not use this exploit maliciously or without permission. Use of this PoC is at your...

CVE-2023-37903

CVE-2023-37903 Exploit for CVE-2023-37903 Proof Of Concept & Reverse Shell CVE Owned by: SeungHyun Lee...

CVE-2025-5781

Exploit de FreePBX CVE-2025-57819 Descripción Este script explota una vulnerabilidad en versiones de FreePBX anteriores a 16.0.26.0 CVE-2025-57819, permitiendo a atacantes remotos ejecutar código PHP arbitrario a través de una falla de inyección SQL en el endpoint de la API AJAX. El exploit crea...

TryHack3M-Bricks-Heist

TryHack3M: Atraco de Bricks Exploit • Writeup • Desafío CTF Un repositorio completo que contiene un exploit personalizado y un writeup detallado para el desafío TryHack3M: Bricks Heist Inicio Rápido • Estructura del Repositorio • El Exploit • El Writeup • Aviso Legal Resumen Este repositorio...

CVE-2024-36057

CVE-2024-36057 — Koha Library Software ID CVE: CVE-2024-36057 Producto: Koha Library Software Tipo de Vulnerabilidad: Inyección de Comandos del Sistema Operativo CWE-78 Puntuación CVSS: 8.7 Alta Autenticado Versiones Afectadas: Inferiores a 22.05.22 Créditos: Karolis Narvilas Descripción Koha es ...

Project-CVE-2026-50751

Pruebas de Seguridad CVE-2026-50751 IKEv1 Descripción Este script de Python es un framework de pruebas de seguridad ofensiva diseñado para apuntar a CVE-2026-50751, una vulnerabilidad de omisión de autenticación en VPN IKEv1 de Check Point. Características Escanea direcciones IP en busca de...

CVE-2026-23744-PoC

CVE-2026-23744-PoC Descargo de responsabilidad: Esta prueba de concepto se proporciona exclusivamente para investigación de seguridad autorizada, fines educativos y entornos de laboratorio controlados p. ej., HTB, CTF o pruebas de penetración internas con consentimiento explícito por escrito. El...

WonderCMS-CVE-2020-35314

CVE-2020-35314 - WonderCMS 3.1.3 中的认证远程代码执行 此仓库创建的目的是测试 WonderCMS v3.1.3 上的远程代码执行漏洞。 此虚假插件包含一个后门 PHP shell，位于 evil.php 文件中。 建议不要在生产 Web 服务器上使用此虚假插件。...

SLAE

SecurityTube Linux Assembly Expert This blog post has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-1134 Articles Assignment 1: Linux x86...