Log4Shell-PoC

██╗ ██████╗ ██████╗ ██╗ ██╗███████╗██╗ ██╗███████╗██╗ ██╗ ██║ ██╔═══██╗██╔════╝ ██║ ██║██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║ ██║██║ ███╗███████║███████╗███████║█████╗ ██║ ██║ ██║ ██║ ██║██║ ██║╚════██║╚════██║██╔══██║██╔══╝ ██║ ██║ ███████╗╚██████╔╝╚██████╔╝ ██║███████║██║...

CVE-2018-11235

CVE-2018-11235 1. ssh to your vps. 2. Clone this repo: root@kitploit: git clone https://github.com/Rezy-Dev/CVE-2018-11235 cd CVE-2018-11235 3. Give exploit.sh execute x permission then execute it: root@kitploit: sudo chmod +x exploit.sh sudo ./exploit.sh It downloads apache2 and builds malicious...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...

CVE-2022-26134

「💥」CVE-2022-26134 Description In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17...

PrintNightmare-CVE-2021-34527

PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability CVE-2021-34527, CVE-2021-1675 Summary This is a remote code execution vulnerability that can be used to obtain SYSTEM level privileges by an authenticated remote user against Windows machines running the print spooler service. An attack...

CVE-2020-7699_reproduce

Reproducción de CVE-2020-7699 Reproducción de la vulnerabilidad RCE en Node.js CVE-2020-7699, mi trabajo de laboratorio Configuración Versión de Node.js: v14.16.1, asegúrate de que la versión de Node.js sea 14 otras versiones probablemente funcionen, no lo probé Versión de Python: 3.9.5, Python...

CVE-2025-34299

CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious SFTP server. How does this detection method work? This...

CVE-2024-1655

CVE-2024-1655 Description ASUS ExpertWiFi EBM63, EBM68, and RT-AX57 Go firmwares before the 12-04-2024 patch contain a command injection vulnerability in splashpageSDN.cgi function. When an attacker sends a specially crafted request, they can achieve arbitrary code execution. references: Official...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — PoC de deserialización de CMapDB en pdfminer.six Prueba de concepto de una vulnerabilidad de deserialización en pdfminer.six que conduce a la ejecución de código arbitrario al analizar un PDF manipulado. PROPÓSITO / AVISO LEGAL Este repositorio se proporciona solo con fines...

CVE-2025-23061

CVE-2025-23061 - Mongoose Command Injection A proof of concept for the Command Injection vulnerability in Mongoose = 7.0.0 = 8.0.0 8.9.5 CVE-2024-53900 & CVE-2025-23061 Timeline November 7, 2024: Dat Phung identified a critical vulnerability in Mongoose and submitted a security report to Snyk...

XWiki-Platform-RCE-CVE-2025-24893

XWiki Platform Unauthenticated RCE Exploit Overview This script is a refurbished Bash implementation of an exploit targeting the XWiki Platform versions affected by CVE-2025-24893. It leverages a critical unauthenticated remote code execution vulnerability that allows attackers to execute arbitra...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE Un exploit optimizado de Prueba de Concepto PoC en Python 3 para WiFi Mouse Server v1.7.8.5. Este script aprovecha una vulnerabilidad inherente del protocolo para lograr la Ejecución Remota de Código RCE mediante la inyección automatizada de pulsaciones de teclado...

Exploit for CVE-2026-19952

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2021-31630-OpenPLC-3-Authenticated-RCE

CVE-2021-31630 OpenPLC 3 WebServer Authenticated Remote Code Execution. Description The presence of Command Injection in Open PLC Webserver v3 enables remote attackers to run arbitrary code by exploiting the "Hardware Layer Code Box" component found on the "/hardware" page of the application. Onl...

CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability

This repository does not have a README...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2022-46169

CVE-2022-46169 Exploit for CVE-2022-46169 Cacti versions before 1.2.3 Here remoteclientauthorized checks the clients hostname in poller table for entry root@kitploit: function remoteclientauthorized // ... $clientaddr = getclientaddr; // ... $clientname = gethostbyaddr$clientaddr; // ... $pollers...

CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246RocketMQRCEEXP Exploit de ejecución remota de código en RocketMQ CVE-2023-33246 Resumen Las versiones de RocketMQ 5.1.0 y anteriores son vulnerables a la inyección de código arbitrario. El componente Broker de RocketMQ queda expuesto en la extranet y carece de verificación de...

cve-2025-55182

CVE-2025-55182 aka React2Shell Setup test enviornment root@kitploit: kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up POC Payload 1. RCE with response in body root@kitploit: POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever Content-Type:...

CVE-2021-42013

CVE-2021-42013 - Apache HTTP Server 2.4.50 Cómo Ejecutar el Lab CVE-2021-42013-Path Traversal 1. Instale y ejecute Docker en su PC/Laptop 2. Clone este repositorio de GitHub 3. Vaya a la carpeta Path Traversal 4. Introduzca el siguiente comando docker build -t cve-2021-42013-path-traversal . y...