119528 matches found
CVE-2025-30065-PoC
CVE-2025-30065 PoC Usage Build the image root@kitploit: docker build -t cve-2025-30065 . Generate the malicious Parquet root@kitploit: docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Trigger the exploit root@kitploit: docker run --rm -v...
CVE-2025-4611-PoC
PoC for CVE-2025-4611 https://an4ss-organization.gitbook.io/anas-almizani-blogs/research/cve-2025-4611...
CVE-2025-27410
CVE-2025-27410...
msgspec-python313-pre
msgspec-python313-pre CVE-2025-27607 fix...
CVE-2025-48384
This repository does not have a README...
CVE-2025-55182_full_exploit
CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...
CVE-2025-48384
This repository does not have a README...
CVE-2025-3248
CVE-2025-3248 Exploit Tool Documentation Introduction This tool is used to exploit the CVE-2025-3248 vulnerability a Python-based code injection vulnerability to achieve remote command execution RCE on the target server by crafting malicious payloads. The vulnerability exists in a web application...
CVE-2025-2404
CVE-2025-2404 Official publication by USOM is expected...
WP-Links-Page-CVE-Report
WP-Links-Page-CVE-Report Disclosure for CVE-2025-10175 CVE-2025-10175 - Vulnerability in WP Links Page This repository discloses a vulnerability discovered in WP Links Page = 4.9.6,WordPress plugin developed by Rico Macchi. 🛠 Affected Version Product : WP Links Page Version : v4.9.6 URL :...
CVE-2025-49144-Research
This repository does not have a README...
test-cve-2025-29927
Test app to exploit CVE-2025-29927 The NextJS app has cookie based authentification and a middleware to prevent unauthorized access to /admin page. To start the app run root@kitploit: yarn then yarn dev To get unauthorized access to /admin page by using CVE-2025-29927 vulnerability run a...
CVE-2025-46657
NOV-CVE Here is the CVE I’ve got: CVE-2025-46657 Twitter: nov1337...
React2Shell-CVE-2025-55182
HackIndex.IO - React2Shell - CVE-2025-55182 + CVE-2025-66478 A HackIndex.io sandbox environment for the React2Shell vulnerability. This will start a web app on port 3000, and a SSH server on port 2222. Start the environment root@kitploit: docker compose up --build --force-recreate SSH Web admin...
Suricata-Rule-for-Detecting-CVE-2025-55182
Suricata Detection Rule for CVE‑2025‑55182 Next.js Action Poisoning → Node.js execSync RCE 📌 Description This document explains how Suricata rule SID 900304 detects exploitation attempts of CVE‑2025‑55182 , a critical vulnerability in Next.js that enables Action Poisoning leading to arbitrary...
Scan-CVE-2025-6058
This repository does not have a README...
POC-CVE-2025-68613
Description PoC exploit code for N8N authenticated RCE vulnerability CVE-2025-68613 Usage python3 poc.py -u -c...
CVE-2025-52691-PoC-SmarterMail-authentication-bypass-exploit-WT-2026-0001
CVE-2025-52691 / WT-2026-0001 SmarterMail Exploit 🚨 IMPORTANT NOTICE This tool is for authorized security testing and educational purposes only! Unauthorized use is illegal and unethical Only use on systems with explicit authorization Use at your own risk Users are responsible for compliance with...
CVE-2025-25763
Este proyecto originalmente contenía algunos detalles de explotación y PoC, que ahora han sido eliminados por solicitud del fabricante. ⚖️ La investigación técnica debe llevarse a cabo siempre bajo premisas legales y de cumplimiento normativo...