CVE-2026-90558 sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

CVE-2023-1521

PoC root@kitploit: gcc -shared -o libpoc.so poc.c -fPIC export LDPRELOAD=fullpathtolibpoc.so sccache gcc foo.c -o foo...

CVE-2023-36844

CVE-2023-36844 La vulnerabilidad "Remote Code Execution in Juniper JunOS within SRX and EX Series products" es un problema de seguridad que permite a un atacante ejecutar código arbitrario en un dispositivo Juniper objetivo que ejecute el software JunOS. Esta vulnerabilidad podría llevar...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on...

CVE-2024-57175

CVE-2024-57175: Cross-Site Scripting XSS almacenado en PHPGURUKUL Online Birth Certificate System v1.0 Descripción Se identificó una vulnerabilidad de Cross-Site Scripting XSS almacenado en PHPGURUKUL Online Birth Certificate System v1.0 en la página /user/certificate-form.php. Esta vulnerabilida...

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468

Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468 Detailed Analysis and script Mitigation Strategies for CVE-2024-38124 and CVE-2024-43468 CVE-2024-38124: Windows Netlogon Technical Exploitation Context: In a real-world scenario, an attacker with access to the...

Exploit_CVE-2019-17558-RCE

ExploitCVE-2019-17558-RCE Apache Solr 1.4 Injection to get a shell to Encode url, postrequest, getrequest...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Usage root@kitploit: python3 CVE-2025-63406.py -u -n -p ...

Ashwesker-CVE-2025-52691

🚨 CVE-2025-52691 — Critical SmarterMail Vulnerability Status: 🔥 Critical — Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29–30, 2025 🧩 Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...

CVE-2025-55182-POC

CVE-2025-55182 / CVE-2025-66478 Vulnerability Reproduction Environment This is a minimal MVP for reproducing the React2Shell CVE-2025-55182 and Next.js RSC RCE CVE-2025-66478 vulnerabilities. ⚠️ Warning This project is intended for security research and educational purposes only. Do not use it in...

HTTP-Request-for-PHP-object-injection-attack-on-CVE-2023-41892

Este tipo de ataque intenta explotar el proceso de deserialización de la aplicación PHP para ejecutar código arbitrario o llevar a cabo acciones no deseadas en el servidor. Estrategias de Mitigación Para defenderse contra la inyección de objetos PHP y ataques similares, considere las siguientes...

CVE-2014-6271

Comprobador de vulnerabilidad Shellshock Este script comprueba si un sitio web es vulnerable a la vulnerabilidad Shellshock CVE-2014-6271. Resumen: La vulnerabilidad Shellshock, también conocida como Bashdoor, es un fallo de seguridad descubierto en septiembre de 2014 en el shell Bash de Unix. La...

Magento-eCommerce-RCE-CVE-2015-1397

Exploit Shoplift de Magento SUPEE-5344 - CVE-2015-1397 Descripción general Este script explota la vulnerabilidad CVE-2015-1397 en Magento, comúnmente conocida como el exploit Shoplift de Magento. Permite a un atacante crear un nuevo usuario administrador en la base de datos de Magento inyectando...

CVE-2025-8088-Exploit

CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4th Class 32 - Sangbeom Woo @taka3636 Summary EJS tags, such as Hello . Internally, EJS compiles the template string into a JavaScript function and then executes it to generate the final HTML. In other words, it is a code generator that "converts...

CVE-2023-4220

Proof of concept exploit for CVE-2023-4220 Affected product : Chamilo = 1.11.24 This CVE abuses an unauthenticated file upload vulnerability in Chamilo 1.11.24 and lower. An attacker has the ability to upload PHP files with no restrictions, leading to RCE. How to use root@kitploit: python3...

CVE-2025-26633

CVE-2025-26633 - PoC de MSC EvilTwin Prueba de Concepto PoC para la vulnerabilidad CVE-2025-26633 que explota la Consola de Administración de Microsoft MMC Acerca de Este PoC simula la vulnerabilidad CVE-2025-26633, descubierta por Trend Micro, que explota la carga de archivos .msc maliciosos par...

CVE-2025-58180

CVE-2025-58180 RCE in OctoPrint via Unsanitized Filename in File Upload In OctoPrint version =1.11.2, an attacker with file upload access e.g., valid API key or session can craft a malicious filename that bypasses sanitization and is later executed by OctoPrint’s event system, leading to remote...

cve-2025-55182-poc

CVE-2025-55182 React2Shell - Academic Proof of Concept ⚠️ DISCLAIMER: EDUCATIONAL USE ONLY This repository contains functional exploit code for a critical vulnerability CVSS 10.0. It is intended strictly for academic research, security analysis, and educational purposes. Do not use this code...

CVE-2019-19609-POC-Python

The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...