CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Description The WooCommerce Designer Pro plugin for WordPress, widely used especially in themes such as Pricom - Printing Company & Design Services, is vulnerable to arbitrary file uploads due to a lack of proper file...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

1 CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain...

CVE-2025-6389

CVE-2025-6389 Sneeit Framework , | | | \ / | | / /| || / / | | | | | / / | / || |||/|/ // / //...

POC-CVE-2012-1831

POC-CVE-2012-1831 Proof Of Concept for the CVE-2012-1831 Kingview Touchview 6.53 Background on Kingview KingView® is a powerful Windows-based industrial SCADA software for monitoring & controlling industrial processes. With over 25 years of development, it's now known for being the best selling...

CVE-2024-39069

ifood Order Manager 'Gestor de Peddios.exe' - DLL hijacking An attacker places a malicious DLL named "d3d12.dll" in a directory that is searched by the application before the legitimate "d3d12.dll" is found. When the application is launched, it loads the malicious DLL instead of the legitimate on...

CVE-2022-31814

CVE-2022-31814 अद्यतन शोषण - pfBlockerNG = 2.1.426 अनधिकृत RCE CVE-2022-31814 विवरण यह स्क्रिप्ट pfBlockerNG = 2.1.426 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट शोषण है जो रिमोट कोड निष्पादन की अनुमति देता है। यह एक एकल लक्ष्य URL या URL की सूची लेता है, कई पेलोड का उपयोग करके एक शेल अपलोड करने का प्रयास करता...

CVE-2025-49844-RediShell-AI-made-Revshell

CVE-2025-49844 RediShell AI-निर्मित Revshell PoC AI द्वारा बनाए गए Redishell PoC का अपरीक्षित पूर्णता। मूल PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py कोरियाई टुकड़ा: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua प्रगति ? हमने बाद में आगे...

cve-2025-66478

CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...

MSTeams---Vulnerability---Remediation

🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...

RCE-CVE-2024-7954

RCE-CVE-2024-7954 Description The porteplume plugin, utilized by SPIP versions prior to 4.30-alpha2 , 4.2.13 , and 4.1.16 , is susceptible to a critical arbitrary code execution RCE vulnerability. This flaw allows a remote, unauthenticated attacker to execute arbitrary PHP code as the SPIP user b...

vulnerability-remediation-cve-2013-3900

🛡️ Remediation of CVE-2013-3900: WinVerifyTrust Signature Validation 📝 Project Overview This project demonstrates a real-world Vulnerability Management Workflow. Using an Azure VM, I hunted down a high-severity signature validation flaw, confirmed it manually via PowerShell, and deployed a...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

CVE-2025-69457

CVE-2025-69457 – Responsive Tourism Website 3.1 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69457 – ExploitDB 50049...

React2Shell-CVE-2025-55182-Advanced-Scanner

CVE-2025-55182 Advanced Scanner Advanced penetration testing tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js applications 📋 Table of Contents Overview Features Installation Usage Examples Bypass Techniques Technical Details Disclaimer Contributing License 🔍 Overview...

Exploit-CVE-2024-23897

Exploit-CVE-2024-23897 कंटेनर चलाएँ docker run -p 8080:8080 --name vulnerable-jenkins -d jenkins/jenkins:2.441-jdk17 लॉग जाँचें docker logs डॉकर मशीन का IP प्राप्त करें: docker inspect vulnerable-jenkins | grep IPAddress शोषण कोड: python3 exploit.py --target http://127.0.0.1:8080 --file...

Mintinstall-object-injection

TR Linux mint सॉफ़्टवेयर प्रबंधक v 7.9.5/9 गलत कॉन्फ़िगरेशन के कारण ऑब्जेक्ट इंजेक्शन और मनमाना कोड निष्पादन का कारण बनता है। EN Linux mint सॉफ़्टवेयर प्रबंधक v 7.9.5/9 गलत कॉन्फ़िगरेशन के कारण हमें ऑब्जेक्ट इंजेक्शन और मनमाना कोड निष्पादित करने का कारण बनता है। root@kitploit: mintinsall TR जब हम...

CVE-2025-69460

CVE-2025-69460 – Simple Image Gallery 1.0 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69460 – ExploitDB 50214...

CVE-2023-38890

CVE-2023-38890 – Online Shopping Portal 3.1 Remote Code Execution WriteUp CVE-2023-38890 – ExploitDB 50029...

POC-CVE-2025-55182

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation root@kitploit: chmod +x scanner.sh Usage root@kitploit: Scan with default command id ./scanner.sh -d example.com Execute custom command...