CVE-2025-3243

CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept exploit for CVE-2025-32433 , a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via malformed SSHMSGCHANNELREQUEST packets. Features Original exploit by Matthew Keeley Updated version by Tyler...

CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins

CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins CVE-2019-1003000 and CVE-2018-1999002 Pre-Auth RCE Jenkins...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...

CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabase Pre-Auth RCE via SQL injection The script will GET /api/session/properties to get the setup token and assess exploitability of the target. If it's vulnerable will then print the setup token, else it will quit after an error message. ...

CVE-2023-24488-SIEM-Sigma-Rule

Sigma Rule: Detection of Pre-Auth XSS CVE-2023-24488 Detect Citrix Gateway Pre-Auth XSS CVE-2023-24488 vulnerability exploitation attempts. This Sigma rule looks for XSS attack patterns in the postlogoutredirecturi query parameter. Rule Description The provided Sigma rule is designed to identify...

Blackash-CVE-2025-61882

🛡️🚨 CVE‑2025‑61882 — Critical Pre‑Auth Remote Code Execution in Oracle E‑Business Suite EBS 🚨🛡️ Short summary: Critical pre‑auth remote code execution in Oracle E‑Business Suite EBS — affects 12.2.3 → 12.2.14, CVSS 9.8 , actively exploited in the wild ransom/ extortion activity reported...

sxwp2shell

root@kitploit: / / / / / / | |/ / \ / / / / / / / / | / / / / / / / // / / / / / // | //// ///// /////|| sxwp2shell — Pre-auth RCE exploit for WordPress via REST API batch-route confusion CVE-2026-63030 + SQL injection CVE-2026-60137. Affected: WP 6.9.0–6.9.4 / 7.0.0–7.0.1 Install...

CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC Description Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress versions 6.9.0 through 7.0.1. It chains: REST API batch route confusion validation vs dispatch mismatch SQL injection via...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 single line bash PoC for GitLab preauth RCE CVE-2021-22205 root@kitploit: t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

wp2shell-checker

root@kitploit: \ \ / / \ / || | | | | | | | \ \ /\ / /| | | \ | || | | | | | | \ V V / | // / | | || || | // || ||/|| ||||| wp2shell-checker | WordPress Batch API Desync Detector Checker detector for the WordPress Core REST Batch API pre-auth RCE Created by 0xjessie21 — Cybersecurity ILCS...

MetabaseRCE_CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 PoC A proof of concept of CVE-2023-38646, a Metabase exploit that allows user to do Remote Code Execution utilizing the setup token found in /api/session/properties to send a payload encoded in base64 Usage ./MetabaseRCECVE-2023-38646 -u target url -t target...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 Technical Analysis A root cause analysis of the vulnerability can be found on my blog Usage root@kitploit: python CVE-2024-4358.py --target...

CVE-2023-38646

CVE-2023-38646 - Metabase RCE Pre-Autenticación ⚠️ Solo con fines educativos y de investigación de seguridad autorizada Autores del Exploit Original Muy agradecido al autor original del PoC securezeron Guías Paso a Paso 1. Configura el Listener en tu máquina atacante: root@kitploit: nc -nlvp 4444...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC for SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 See our blog post for technical details https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Action root@kitploit: python...

cve-2026-39987

cve-2026-39987 Installation • Usage • Examples I'm just trying out Go :D Btw: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended Custom Command -c: r...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase Pre-auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

typehub-exploiter

typehub-exploiter GILANG - Explotador para CVE-2021-25094 referencia: https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ payload: site.com/wp-admin/admin-ajax.php ruta del bug: site.com/wp-content/uploads/typehub/custom/ Gracias a: Ibnudz, Dark clown security saludos: Garud...

Mass-exploit-CVE-2022-29464

Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...

CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

ConfluentPwn

ConfluentPwn Confluence pre-auth ONGL injection remote code execution scanner CVE-2022-26134. Usage The below GIF shows a demo usage of the tool: Here is the help output of the tool: root@kitploit: $ ./cfscan -h +-------------------------------+ | C O N F L U E N T P W N |...