516244 matches found
CVE-2026-53552 Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers
Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Project.Edit in cmd/server/api/project/handler.go accept a project or project-file row id from the JSON body and act on it without checking that the...
CVE-2018-8284-Sharepoint-RCE
CVE-2018-8284-Sharepoint-RCE...
cve-2019-3396
cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 setup exploit libraries root@kitploit: bundle install run root@kitploit: ┌──user㉿hostname-/path/to/cve-2019-3396 └─$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahma...
CVE-2020-35729
Información root@kitploit: Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...
CVE-2021-24155.rb
WordPress-Backup-RCE Este módulo de Metasploit permite a un atacante con una cuenta privilegiada de WordPress lanzar una shell inversa debido a una vulnerabilidad de carga de archivos arbitraria en el plugin de WordPress Backup Guard versiones anteriores a la 1.6.0. Esto se debe a una verificació...
BiblioRCE
An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...
CVE-2026-83497 Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination
Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql endpoint...
EUVD-2026-68722
Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql endpoint...
CVE-2026-83497
CVE-2026-83497 is an unrestricted Java deserialization vulnerability in the cursor pagination component of the OpenSearch SQL plugin . A remote authenticated user with basic read/search permissions can execute arbitrary code on the server by sending a crafted cursor parameter to the /_plugins/_sq...
CVE-2023-27326
Parallels Desktop VM Escape This repository contains an exploit for a Parallels Desktop vulnerability which has been assigned CVE-2023-27326. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. The exploit was tested on Parallels Deskto...
CVE-2022-1388
Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...
CVE-2020-12753-PoC
CVE-2020-12753-PoC This repo contains a proof-of-concept for 🔋📱❄️🥾🔓, an SBL1/aboot vuln for Secure EL3 arbitrary code execution on the LG Stylo 4 AMZ/Q710ULM. This is only tested on updates 20a and 20c and with the SBL1 variant of the vulnerability. root@kitploit: - Makefile : Builds...
CVE-2021-44228-PoC
CVE-2021-44228 PoC PoC para CVE-2021-44228. Proyecto creado SOLO CON FINES EDUCATIVOS. Servidor del exploit Este proyecto crea dos servidores: http y ldap. Ambos son necesarios para que el exploit funcione. El archivo java especificado se compila y los servidores se inician en el Dockerfile. El...
CVE-2017-0199-v5.0
Exploit toolkit CVE-2017-0199 - v5.0 Exploit toolkit CVE-2017-0199 - v5.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...
CVE-2024-53677-Exploitation
CVE-2024-53677 Exploitation Apache Struts RCE via File Upload Description CVE-2024-53677 is a vulnerability which impacts Apache Struts from 2.0.0 before 6.4.0. ⚠️ This was exploited in a Hack The Box lab. File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params...
cve-2019-17558-apache-solr-rce
Apache Solr RCE CVE-2019-17558 - CTF Write-up Practical exploitation of a Velocity Template Injection vulnerability in Apache Solr, progressing from a failure in an automated tool Metasploit to a successful manual exploitation. This write-up documents the complete reasoning of the exercise,...
CVE-2026-79748
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update MCP server configurations a...
CVE-2023-20511
Release of an invalid pointer in the AMD kernel mode driver KMD could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution...
CVE-2023-20511
CVE-2023-20511 affects the AMD kernel mode driver (KMD) , where an invalid pointer release can create a double free condition. A privileged attacker with network access and high attack complexity could potentially exploit this to achieve arbitrary code execution . The CVSS v3.1 score is 6.4 (Medi...