CVE-2025-14754

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

EUVD-2025-210937

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

CVE-2026-81942

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

EUVD-2026-82987

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

sshpass-win32

sshpass-win32 Like https://linux.die.net/man/1/sshpass Pre-Requirements To run sshpass, you must install: Windows 10 Insider build 17733 or later Install Winget root@kitploit: winget install xhcoding.sshpass-win32 Scoop root@kitploit: scoop install sshpass Usage root@kitploit: Usage: sshpass...

CVE-2022-25064

CVE-2022-25064 This script exploits a OS Command Injection vulnerability in the TPLink WR840N router, using the configure function IPv6 protocol...

exploit-CVE-2022-25765

Exploit for CVE-2022-25765 pdfkit - Command Injection Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 python CVE-2022-46169.py tageturl...

URS

root@kitploit: /\ /\ /'/',\ \ \ \ \ \ //, \ \ /\ \// // // // U niversal R eddit S craper - A comprehensive Reddit scraping command-line tool written in Python. Sponsors If this project has saved you time, consider sponsoring its development. --- Table of Contents Contact Introduction...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

CVE-2022-36231

CVE-2022-36231 The ruby gem pdfinfo = 0.5.3 is vulnerable to OS Command Injection when executing a method on a PDF::Info object. An attacker using a specially crafted payload may execute OS commands by using command chaining. Vulnerability Analysis When creating a new PDF::Info object the...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Background pfBlockerNG is the Next Generation of pfBlocker with the following features: 1. Manage IPv4/v6 List Sources into 'Deny, Permit or Match' formats. 2. GeoIP database by MaxMind Inc. GeoLite2 Free version. 3. De-Duplication, Suppression, and Reputation...

CVE-2023-49367

CVE-2023-49367 - Sensetive Data Exposure Sensetive Data Exposure in Kyocera Printer Web Panel Vendor: Kyocera Corporation Affected Versions: Command Center RX - EXOSYS M5521cdn Description After connecting to the Kyocera interface address book, test requests for smb and ftp can be seen in the sen...

CVE-2024-4358

Telerik Report Server Authentication Bypass - CVE-2024-4358 Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicabl...

CVE-2018-7750

CVE-2018-7750 an RCE remote command execution approach of CVE-2018-7750 Exploit Title: Paramiko 2.4.1 - Remote Code Execution Date: 2018-11-06 Exploit Author: jm33-ng Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz Version: 1.17.6...

CVE-2026-58635-PoC

CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation Proof of concept for CVE-2026-58635 , a command-injection vulnerability in Windows Narrator Braille. A local authenticated user can abuse a writable BrlAPI parameter to make the privileged BRLTTY service execute an arbitrary...

CVE-2023-33538

Python Exploit for TP-Link TL-WR940N/TL-WR841N Command Injection Vulnerability Usage Instructions 1. Basic Vulnerability Check : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. Execute Custom Command : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p...

CVE-2026-93576 Io.netty/netty-codec-smtp: netty netty-codec-smtp — smtp command-name field is not crlf-validated (incomplete fix of cve-2025-59419)

Netty netty-codec-smtp — SMTP command-name field is not CRLF-validated incomplete fix of CVE-2025-59419...

CVE-2026-93576

CVE-2026-93576 affects Netty netty-codec-smtp , where the SMTP command-name field is not properly CRLF-validated . This is classified as an incomplete fix of the earlier CVE-2025-59419 , meaning the previous remediation did not fully address the validation gap. The Red Hat-assigned CVSS 3.1 score...