FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload

FlowiseAI Flowise version 2.2.6 and below contains an arbitrary file upload vulnerability in the /api/v1/attachments endpoint. This vulnerability allows an unauthenticated attacker to upload files outside the intended directory through path traversal, potentially leading to API key exposure and...

FoxCMS v.1.2.5 - Remote Code Execution

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. id: CVE-2025-29306 info: name: FoxCMS v.1.2.5 - Remote Code Execution author: ritikchaddha severity: critical description: | An issue in FoxCMS v.1.2.5 allows a...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk contains an authentication bypass vulnerability caused by improper access control, letting attackers execute protected actions without authentication, exploit requires no special conditions. id: CVE-2025-40552 info: name: SolarWinds Web Help Desk - Authentication Bypass...

Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

BMC FootPrints - Authentication Bypass

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability in the password reset functionality. Unauthenticated attackers can access the /footprints/servicedesk/passwordreset/request/ endpoint to obtain a valid SECTOKEN session cookie without proper...

ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting

ONLYOFFICE Docs DocumentServer = 8.3.1 contains a reflected XSS caused by improper sanitization of crafted HTTP POST requests via the WOPI protocol, letting attackers inject malicious scripts reflected in HTML response, exploit requires crafted POST requests. id: CVE-2025-5301 info: name:...

Post SMTP <= 3.6.0 - Email Log Disclosure

Post SMTP WordPress plugin = 3.6.0 contains an unauthorized data access vulnerability caused by missing capability check in construct function, letting unauthenticated attackers read arbitrary logged emails, exploit requires no authentication. id: CVE-2025-11833 info: name: Post SMTP = 3.6.0 -...

GeoServer WFS - XXE Processing Vulnerability

GeoServer Web Feature Service WFS is vulnerable to an XML External Entity XXE processing attack due to improper handling of XML input. This vulnerability allows attackers to perform Out-of-Band OOB data exfiltration and Server-Side Request Forgery SSRF by exploiting the GeoTools library. id:...

POC2-CVE-2025-55182

React2Shell Ultimate — сканер CVE-2025-66478 Самый всеобъемлющий сканер уязвимости удалённого выполнения кода Next.js RSC root@kitploit: ╔════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | || / || | | | | ║ ║ | | / / |/ | | / /\ | ' \ / \ | | ║ ║ | / | | | | /...

CVE-2025-63729-Syrotech-SY-GPON-1110-

PoC для CVE-2025-63729 Обнаружил : Yashodhan Vivek Mandke...

CVE-2025-32429

CVE-2025-32429 – PHP PDO预处理语句中的SQL注入 此仓库包含一个针对 CVE-2025-32429 的概念验证漏洞利用程序，该漏洞影响启用了模拟功能的 PHP PDO 预处理语句。 📄 参考资料 Assetnote 的原始研究： https://slcyber.io/assetnote-security-research-center/a-novel-technique-for-sql-injection-in-pdos-prepared-statements NVD 条目：...

CVE-2025-4123-Exploit

CVE-2025-4123 PoC Un piccolo strumento proof-of-concept — invia un payload specifico a un target e verifica le risposte di reindirizzamento 301/302, riportando l'header Location. Questo repository è destinato esclusivamente a scopi educativi/di ricerca. Segui le politiche di divulgazione...

sccm_sql_backdoor

sccmsqlbackdoor Uma ferramenta de prova de conceito que implanta um backdoor controlado em um procedimento armazenado do Management Point, permitindo a execução indireta de SQL por meio de um serviço HTTP legítimo do MP. Instalação Você pode instalar clonando o repositório e instalando as...

fortiweb-auth-bypass-check

FortiWeb 인증 우회 점검 Bishop Fox의 FortiWeb 인증 우회 스캐너 대상이 인증 우회 CVE-2025-64446에 취약한지 테스트합니다. 경로 탐색path traversal만 악용하며 실제 인증 우회는 악용하지 않습니다. 대상에 대해 어떠한 관리 작업도 수행하지 않습니다. 이 취약점에 대한 자세한 내용은 Bishop Fox 블로그를 참조하세요. 설치 root@kitploit: git clone https://github.com/BishopFox/fortiweb-auth-bypass-check cd...

React2Shell-CVE-2025-55182

此存储库没有 README。...

CVE-2025-11833-PoC

CVE-2025-11833 检测器 python3 main.py --url http://localhost --username admin --loot 本仓库仅用于教育和研究目的。作者不对任何滥用行为承担责任。请始终在受控且隔离的环境中测试 PoC。...

CVE-2025-24752-POC

CVE-2025-24752-POC 简介 此 Python 应用程序用于检查网站是否存在 CVE-2025-24752 漏洞。 安装 克隆此仓库并运行： root@kitploit: pip3 install -r requirements.txt 使用 root@kitploit: python3 cve-2025-24752.py --url http://example.com 或 root@kitploit: python3 cve-2025-24752.py --urls-file urls.txt...

CVE-2023-34233_Proof_OF_Concept

PoC для Snowflake Connector CVE-2025-24793 Этот репозиторий содержит код проверки концепции PoC для тестирования уязвимости CVE-2025-24793 в Snowflake Connector для Python. Проект включает как исправленную, так и неисправленную версии, чтобы продемонстрировать уязвимость и её исправление...

AppEnumFix

Jailbreak-Tweak zum Patchen von CVE-2025-31207, einem Fehler, der Sandbox-Anwendungen erlaubt, die installierten Apps eines Benutzers aufzulisten. Von Apple in iOS 18.5 behoben 22F5053j / iOS 18.5 Beta 3 diff...

Cve-2025-8088-WinRar-vulnerability

Cve-2025-8088 WinRAR Outil en Python qui crée un fichier RAR malveillant pour exploiter la vulnérabilité CVE-2025-8088 dans WinRAR. La vulnérabilité CVE-2025-8088 permet l'exploitation de fichiers RAR manipulés pour provoquer un path traversal et écraser des fichiers arbitraires sur le système de...