CVE-2008-4654

CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...

S2-046_S2-045_POC

S2-046POC Usage: root@kitploit: ./s2046.sh url ./s2045.sh url Sample: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action OUTPUT: root@kitploit: ================HTTP GET Method================ uid=0root gid=0root groups=0root...

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — SiYuan MCP Unauthenticated Administrator Takeover Proof of Concept for CVE-2026-66012 CVSS 10.0 Critical, a missing-authorization vulnerability in SiYuan's MCP Model Context Protocol endpoint that allows an unauthenticated attacker to achieve administrator takeover and remote cod...

CVE-2019-9978

Social Warfare Plugin Wordpress 3.5.2 Remote Code Execution Wordpress Social Warfare Remote Code Execution AUTO UPLOAD SHELL Date: March, 2019 Download Link: https://wordpress.org/plugins/social-warfare/ Reference: https://wpvulndb.com/vulnerabilities/9259 Version: CVE: 2019-9978 USAGE: python...

CVE-2024-3273-EXPLOIT

CVE-2024-3273 - D-Link Remote Code Execution RCE 💥 A critical vulnerability, classified as CVE-2024-3273, was discovered in several D-Link NAS devices, including DNS-320L, DNS-325, DNS-327L, and DNS-340L, up to the date of 20240403. This vulnerability affects an unknown function of the file...

CVE-2022-33891-EXPLOIT

CVE-2022-33891 - Apache Spark UI Remote Code Execution RCE 🔐 Apache Spark UI is susceptible to a remote command injection vulnerability identified as CVE-2022-33891. This flaw arises due to improper handling of user authentication and access control, specifically when Access Control Lists ACLs ar...

CVE-2024-10914-EXPLOIT

CVE-2024-10914 - Ejecución Remota de Código RCE en D-Link Este repositorio contiene un exploit de prueba de concepto PoC para una vulnerabilidad crítica que afecta a dispositivos NAS de D-Link. El fallo, identificado como CVE-2024-10914 , afecta a los siguientes modelos: D-Link DNS-320 D-Link...

CVE-2014-6271-EXPLOIT

CVE-2014-6271 - Shellshock 💣 Shellshock es una vulnerabilidad crítica en el intérprete de comandos GNU Bash. Afecta a las versiones hasta la 4.3 y permite a atacantes remotos ejecutar código arbitrario. Esta explotación se produce debido a cómo Bash procesa las cadenas finales después de las...

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution Script that exploits the vulnerability that allows remote code execution in Ruby 2.3.8 ​​with CVE-2016-2098 Usage ./RubyOnRailsActionPackInlineERB-RemoteCodeExecution.py -h --target-host TARGETHOST --port PORT --target-uri TARGETURI...

CVE-2012-2982

CVE-2012-2982 John Hammond | September 4th, 2021 Checking searchsploit for Webmin 1.580 I only saw a Metasploit module for the /file/show.cgi Remote Code Execution attack on that legacy Webmin version. This code is an attempt to recreate that in Python without using Metasploit. Files...

CVE-2024-4701-POC

CVE-2024-4701-POC POC for CVE-2024-4701 Download the genie docker file from https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml or this repo run docker-compose up Download the attached http payload loadlib Run the following command nc -w 5 localhost 8080 loadlib You may need to...

CVE-2026-65008

CVE-2026-65008 — Grav CMS 2.0.7 RCE autenticada Prueba de concepto para CVE-2026-65008 : ejecución remota de código autenticada en Grav CMS mediante calluserfuncarray sin restricciones en Blueprint::dynamicData. Un usuario con admin.pages o api.pages.write puede insertar un frontmatter malicioso ...

CVE-2023-38646-PoC-Metabase

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...

WhatsRCE

WhatsRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? root@kitploit: sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRC...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 Apache Dubbo deserialización RCE video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4...

RCE-CVE-2020-5902

RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Description These attacks are targeting BIG-IP, a multi-purpose networking device manufactured by F5 Networks. BIG-IP devices can be configured to work as traffic shaping systems, load balancers, firewalls, access gateways, rate limiters, or SSL...

CVE-2026-85978

CVE-2026-85978 is a CRITICAL (CVSS 4.0: 10.0) unauthenticated remote code execution vulnerability in the Policy Manager console of Akana API Platform . A path normalization discrepancy between the authentication filter and the servlet dispatcher allows an attacker to craft a request that bypasses...

CVE-2026-85978 Unauthenticated Remote Code Execution in Akana API Platform

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

CVE-2026-85978 Unauthenticated Remote Code Execution in Akana API Platform

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

CVE-2022-32119

CVE-2022-32119 - Arox-Unrestricted-File-Upload There are multiple unrestricted file uploads that result in the arbitrary execution of PHP code. Authenticated Vulnerable Pages: localhost/officeadmin/?pid=54&action=add root@kitploit: -----------------------------181967832439954202373233921976...