cve-2025-55182

CVE-2025-55182 Exploit Python Script Python 3 pouvant être utilisé pour démontrer CVE-2025-55182. Il exploite une vulnérabilité d'injection JavaScript côté serveur dans les applications Next.js/React, permettant l'exécution de code à distance via des données de formulaire multipart malformées. ⚠️ ...

CVE-2025-26055

CVE-2025-26055 CVE Description Author : Rohan Deshpande OS Command Injection Summary OS command injection is a security vulnerability that allows an attacker to execute arbitrary commands on a host operating system via a vulnerable application. This can lead to unauthorized access, data breaches,...

n8n-cve-2025-68613

CVE-2025-68613 – Inyección de Expresiones en n8n RCE Este repositorio proporciona scripts de escáner y PoC de explotación para la vulnerabilidad crítica CVE-2025-68613 que afecta a n8n Workflow Automation Platform. ADVERTENCIA / AVISO Español Esta herramienta es SOLO para pruebas de seguridad...

CVE-2024-46256

CVE-2024-46256 Nginx Proxy Manager RCE Vulnerability Analysis Environment Setup 1. Running Nginx Proxy Manager 2.11.3 Environment root@kitploit: docker-compose up -d Or you can use the automated script: root@kitploit: python setupenvironment.py 2. Accessing Nginx Proxy Manager URL:...

CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

CVE-2025-34159

CVE-2025-34159: Inyección de Docker Compose en Coolify Resumen de la vulnerabilidad Campo| Valor ---|--- ID CVE| CVE-2025-34159 Afecta| Coolify ≤ v4.0.0-beta.420.6 Corregido en| v4.0.0-beta.420.7 Gravedad| Crítica CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-...

EUVD-2026-66381

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 Упрощённый эксплойт на Bash для CVE-2023-27350. Этот скрипт автоматизирует обход аутентификации, подготовку окружения и внедрение команд через механизм сценариев принтера PaperCut. Наглядная демонстрация Базовая RCE: Запуск обратной оболочки: Быстрый старт...

CVE-2025-61246

CVE-2025-61246 - Vulnerabilidad de Inyección SQL en Sistema de Compras en Línea Descripción general Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-61246 , una vulnerabilidad crítica de Inyección SQL descubierta en la aplicación PHP Sistema de Compras en Línea. La vulnerabilida...

CVE-2024-32019_poc

Privilege Escalation via ndsudo Netdata Local Exploit This is an alternative POC to exploit a vulnerable ndsudo utility bundled with Netdata to perform a local privilege escalation. The exploit works by adding the script inside the user’s PATH substituting an allowed command nvme by ndsudo and...

CVE-2024-7591-PoC

CVE-2024-7591-PoC These PoC python scripts test the Kemp LoadMaster for remote code execution. THIS TOOL IS INTENDED FOR TESTING PURPOSES ONLY These scripts were based on Marius Walter's writeup on the specifics of this exploit. You can read their post at:...

log4j-log4shell-playground

About A playground for poking at the critical log4j aka Log4Shell CVE-2021-44228 vulnerability mitigations. This particular problem lies within the JndiLookup feature and the log4j ability to interpret ALL the arguments of a logging call. I would expect it to only interpret the format message the...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

CVE-2026-83549 is a post-authentication OS Command Injection (CWE-78) in the SonicWall SMA1000 Appliance Management Console (AMC) , scored CVSS 7.8 (High) with a local attack vector. In specific conditions, a remote authenticated attacker with administrator privileges can execute arbitrary OS com...

CVE-2017-5638

CVE-2017-5638 CVE: 2017-5638 in different formats Most of them will require you to enter the url and you might want to change the command Please issue pull requests if you can make it so you can enter a url and command! PHP - Example http://localhost/2017-5638.php?url=TARGET&cmd=command...

cve-2024-10914-port

CVE-2024-10914 ported to rust and python because why not what is this cve-2024-10914 is a recently discovered 9.8 critical score vulnerability that affects some dlink routers. because those routers reached their eol support, dlink refuses to patch this vulnerability because "stop being poor and...

CVE-2024-38793-PoC

CVE-2024-38793-PoC Proof of Concept code for exploitation of CVE-2024-38793 Best Restaurant Menu by PriceListo = 1.4.1 - Authenticated Contributor+ SQL Injection. Proof Of Concept This is a proof of concept exploit for the vulnerability CVE-2024-38793, an SQL injection vulnerability for versions ...

CVE-2025-5781

FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Tested against VMware VCSA 6.7 create ssh keypair root@kitploit: ssh-keygen -t rsa -f vcsa.key -N '' create tarbal with ../../../../../home/vsphere-ui/.ssh/authorizedkeys root@kitploit: python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar...