CVE-2016-2173

CVE-2016-2173 - Remote Code Execution in Spring AMQP - App Test Description The class org.springframework.core.serializer.DefaultDeserializer does not validate the deserialized object against a whitelist. By supplying a crafted serialized object like Chris Frohoff's Commons Collection gadget,...

CVE-2018-17553

CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS version 2.8 and prior This proof of concept was put together when working on the Black Pearl box from TCM. I couldn't find anyone that put out a PoC other than just using Metasploit. As I'm avoiding Metasploit in my hacking journey to then go back an...

CVE-2025-49071

CVE-2025-49071 Flozen 1.5.1 - Unauthenticated Arbitrary File Upload Description : Flozen Theme 1.5.1 - Unauthenticated Arbitrary File Upload Description The Flozen Theme for WordPress versions up to and including 1.5.1 is vulnerable to unauthenticated arbitrary file upload, due to missing...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

CVE-2015-6967

CVE-2015-6967 An exploit for the Nibbles manager version 4.0.3. This exploit allows RCE to be performed. Requirements optparse, signal, requests Usage root@kitploit: python3 CVE-2015-6967.py --url http://10.129.156.150/ --username admin --password nibbles + Login Succesfuly! + Uploading shell...

MAL-008

MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 in Cisco SD-WAN Cisco SD-WAN v20.4.2.1 uses an old version of SSH OpenSSH7.6p1 that is susceptible to the “SSHtranger Things” attack. If a victim tries to connect to a malicious/compromised SSH server this attack may be used to write/overwri...

CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit

CVE-2024-0670 – CheckMK Agent Local Privilege Escalation PoC This repository contains a simple and clean proof-of-concept for CVE-2024-0670, a local privilege escalation vulnerability in the CheckMK Windows Agent. A low-privileged user can gain SYSTEM privileges by abusing writable temp file path...

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...

CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE-

CVE-2025-49132 Pterodactyl Panel - Unauthenticated Remote Code Execution RCE 🔎 Summary CVE‑2025‑49132 is a critical Remote Code Execution vulnerability affecting Pterodactyl Panel --cmd "" --path Examples root@kitploit: python3 CVE-2025-49132-dbs.py --target victim.com --cmd "whoami" python3...

CVE-2026-2035703-x300

CVE-2026-2035703: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Under coordinated disclosure 90-day embargo Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-2035703 Severity: Critical CVSS 9.8 CWE: CWE-78 OS Command...

log4j

Log4J Zero-Day Compilation of log4j OSINT findings, including Detection, Attack Surface, Mitigation, IoCs. I. Overview Summary This vulnerability makes it possible for any attacker who can inject text into log messages or log message parameters into server logs to load code from a remote server...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...

CVE-2021-25646

Apache Druid RCE title="druid" && title=="Apache Druid" POST /druid/indexer/v1/sampler?for=filter HTTP/1.1 Host: x.x.x.x:8888 Content-Length: 612 Accept: application/json, text/plain, / Origin: http://x.x.x.x:8888 User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko...

CVE-2019-18655

CVE-2019-18655 metasploit module. SEH based buffer overflow in file sharing wizard app v.1.5.0. CVE summary: File Sharing Wizard version 1.5.0 is affected of Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution a...

Fortijump-Exploit-CVE-2024-47575

CVE-2024-47575 Fortinet FortiManager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575 See our blog post for technical details To begin, establish your ncat session: root@kitploit: nc -lvvnp 80 Then, execute our detection artefact generator: root@kitploit: python3 CVE-2024-47575....

CVE-2025-3248

CVE-2025-3248 Exploit Tool Documentation Introduction This tool is used to exploit the CVE-2025-3248 vulnerability a Python-based code injection vulnerability to achieve remote command execution RCE on the target server by crafting malicious payloads. The vulnerability exists in a web application...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Buffer Overflow Discoverer : Golden Ticket Labs Vendor : Particle Date Assigned : August 12th 2025 MITRE Description A buffer overflow in the blecontrolrequestchannel.cpp component of Particle Device OS v5.6.0 enables arbitrary function pointer overwrite du...

CVE-2025-32682

🐚 CVE-2025-32682 - Arbitrary File Upload in MapSVG Lite = 8.5.34 📌 Plugin Details Name: MapSVG Lite Affected Version: = 8.5.34 Vulnerability Type: Arbitrary File Upload CVE ID: CVE-2025-32682 Published Date: 15 April, 2025 CVSS Score: 9.9 Critical 💥 Vulnerability Summary The MapSVG Lite plugin fo...

CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 Test Environment root@kitploit: mkdir CVE-2021-3129-docker cd CVE-2021-3129-docker wget https://raw.githubusercontent.com/vulhub/vulhub/master/laravel/CVE-2021-3129/docker-compose.yml docker compose up -d Usage root@kitploit: git clone...