CVE-2025-6218-POC

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...

CVE-2022-36804-POC

CVE-2022-36804-POC 🕷️ Bitbucket CVE-2022-36804 unauthenticated remote command execution Exploitation Find publicly visible repositories - example.com/repos?visibility=public...

ATutor-2.2.4-Language-Exploit

ATutor 2.2.4 Arbitrary File Upload / RCE CVE-2019-12169 Exploit Title: ATutor 2.2.4 Arbitrary File Upload / RCE CVE-2019-12169 Date: 5/24/19 Exploit Author: liquidsky JMcPeters Vendor Homepage: https://atutor.github.io/ Software Link: https://sourceforge.net/projects/atutor/files/latest/download...

CVE-2023-38831

CVE-2023-38831 WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file such as an ordinary .JPG file and also a folder that has the same name as t...

CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

hack-winrar

hack-winrar WinRar is a very widely known software for windows. Previous version of WinRaR was a vulnerability which has been patched in Feb-2019. Most of the people didn't update winrar so they are vulnerable in this Absolute Path Traversal bug CVE-2018-20250 exp for Extracting Code Execution Fr...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Prueba de Concepto Resumen Este repositorio contiene un script en Python que demuestra una prueba de concepto PoC del exploit para CVE-2023-38831. Este exploit aprovecha una vulnerabilidad en mecanismos específicos de procesamiento de archivos para ejecutar un payload de...

Links.a

CVE-2023-44962 PoC for CVE-2023-44962 Analysis Uploading archive files containing symbolic links in upload-cover-image.pl can leak some of the content of the linked files. root@kitploit: ... foreach my $dir @directories my $file; if -e "$dir/idlink.txt" $file = "$dir/idlink.txt"; elsif -e...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR Archivo RAR de PoC para WinRAR 0day CVE-2025-8088 Coloque el archivo MyResumefinal.rar en el directorio de Descargas y extráigalo usando "Extract to MyResumefinal" o desde la interfaz usando WinRAR vulnerable por ahora para ejecutar el exploit : Verá que un archivo...

Exploits + Shellcode + GHDB

The Exploit Database Git 저장소 이곳은 Offensive Security가 후원하는 프로젝트인 The Exploit Database의 공식 저장소입니다. 저장소 목록은 다음과 같습니다: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers: gitlab.com/exploit-database/exploitdb-papers T...

cve-2023-38831

CVE-2023-38831 WinRAR エクスプロイト PoC このリポジトリには、CVE-2023-38831 を悪用するための Python の概念実証 PoC スクリプトが含まれています。この脆弱性は、WinRAR バージョン 6.23 未満 に存在し、ユーザーが特別に細工されたアーカイブを開くとコード実行を許します。 説明 このスクリプトは、WinRAR のファイル名解析の脆弱性を悪用した悪意のある RAR アーカイブ 実際は .rar 拡張子の ZIP ファイル を生成します。被害者が細工されたアーカイブを開き、デコイファイルをダブルクリックすると、ペイロード .bat や...

WordPress JS Archive List <= 6.1.5 - SQL Injection

Miguel Useche JS Archive List contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2025-54726 info: name: WordPress JS Archive List = 6.1.5 - SQL Injection author:...

EUVD-2026-76748

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

CVE-2026-90445

CVE-2026-90445 is a path traversal vulnerability in an interface that accepts file uploads from authenticated users . The root cause is that uploaded archives are extracted without validating that file paths remain within the intended destination directory, allowing an attacker to write files to ...

CVE-2026-90445

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...