cve-2025-55182-react2shell-analysis

CVE-2025-55182 React2Shell — Analyse de sécurité Aperçu Ce projet est une analyse technique de CVE-2025-55182, une vulnérabilité critique d'exécution de code à distance RCE divulguée en décembre 2025. La vulnérabilité affecte les composants serveur React et permet aux attaquants d'exécuter du cod...

CVE-2019-9202

CVE-2019-9202 Exploit de execução remota de código no Nagios IM 2.6: CSRF + SQLi + RCE + LPE -- root remoto Descrição Ao encadear uma falsificação de solicitação entre sites CSRF / bypass de autorização CVE-2019-9203 é possível explorar uma injeção SQL baseada em UNION CVE-2019-9204, uma execução...

covenant_rce

Dieses Repository hat keine README-Datei...

golang-webmin-CVE-2022-0824-revshell

golang-webmin-CVE-2022-0824-revshell RCE in Webmin URL di destinazione c - credenziali per webmin sl - IP e porta del tuo server locale per ospitare il payload s - IP di callback p - porta di callback Riferimenti https://www.webmin.com/security.html...

CVE-2023-3722

CVE-2023-3722 POC Python per CVE-2023-3722 Avaya Aura Device Services RCE tramite caricamento file senza restrizioni. Questo script utilizza una richiesta PUT per caricare un file php con un nome file generato casualmente di otto cifre. Successivamente effettua una richiesta GET per recuperare...

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 costruttore di payload & exploit Info / Aiuto root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Installa le librerie richieste con: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTI...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 oder 6.0 - Exploit für Remote Code Execution Um die Anforderungen zu installieren, führen Sie aus: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Hier ist die Verwendung des...

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: संक्षिप्त विवरण Apache Log4j2 2.0-beta9 से 2.15.0 तक रिलीज 2.12.2, 2.12.3, और 2.3.1 को छोड़कर कॉन्फ़िगरेशन, लॉग संदेशों और पैरामीटर में उपयोग की जाने वाली JNDI सुविधाएँ हमलावर-नियंत्रित LDAP और अन्य JNDI-संबंधित एंडपॉइंट से सुरक्षा नहीं करती हैं। एक हमलावर जो लॉग संदेशों...

CVE-2026-76640

Unitree G1 EDU firmware through 1.5.2 contains chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow an unauthenticated proximate attacker to achieve root code execution (uid 0) without pairing or credentials. The root cause involves an unquoted heredoc variable in...

CVE-2026-76640 Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack

Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an unquoted heredoc variable in the WiFi...

CVE-2022-1565

Plugin WordPress WP All Import = 3.6.7 - Esecuzione di codice da remoto RCE Autenticato root@kitploit: Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm:...

CVE-2022-1329

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Datum: 16. April 2023 Exploit-Autor: Việt Hùng https://github.com/phanthibichtram12 Anbieter-Website: https://elementor.com/ Software-Link: https://wordpress.org/plugins/elementor/advanced/ nach unten scrollen und...

EUVD-2026-67165

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Upload Automático de Shell WordPress Royal Elementor 1.3.78 Upload de Shell Visite https://phankz.com...

Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 Descrizione della vulnerabilità All'inizio, gli hacker hanno sfruttato la vulnerabilità del componente WLS di WebLogic per lanciare attacchi remoti su larga scala contro i server aziendali. Un gran numero di server aziendali è...

ace-vim-neovim

ace-vim-neovim Vim/Neovim Arbitrary Code Execution via Modelines CVE-2019-12735 Usage 1. listen root@kitploit: nc -vlp 9999 2. ace root@kitploit: vim pocshell.txt And then, your localhost will get shell...

Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin

On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub...

CVE-2020-17533

Recentemente, è stata scoperta una vulnerabilità di esecuzione remota di codice in Apache Struts2 ID CVE: CVE-2020-17530. Il framework Apache Struts2 è un framework Web utilizzato per lo sviluppo di applicazioni di rete Java EE. Essendo ampiamente utilizzato, la portata dell'impatto della...

CVE-2023-46604-LAB

CVE-2023-46604 – RCE su Apache ActiveMQ Protocollo OpenWire Questo repository documenta un ambiente di laboratorio utilizzato per comprendere e rilevare la vulnerabilità CVE-2023-46604 che colpisce Apache ActiveMQ. L'obiettivo di questo progetto: Comprendere come si comporta l'exploit a livello d...