cve-2024-38077-madlicense_reproduction

CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution "MadLicense" I. Vulnerability Overview CVE ID : CVE-2024-38077 Alias : MadLicense CVSS Score : 9.8 Critical Type : Heap-Based Buffer Overflow CWE-122 Discovered by : Ver, Lewis Lee, Zhiniang Peng Description : A...

metabase-pre-auth-rce-poc

Metabase Pre-Auth RCE CVE-2023-38646 POC This is a script written in Python that allows the exploitation of the Metabase's software security flaw described in CVE-2023-38646. The system is vulnerable in versions preceding 0.46.6.1 , in the open-source edition, and preceding 1.46.6.1 , in the...

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence 사전 인증 RCE...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: React Server Components의 사전 인증 없이 가능한 원격 코드 실행 치명적 취약점 schema.cx의 보안 연구 "통제는 환상이다. 우리를 통제하는 것은 우리가 구축한 시스템이다—우리가 먼저 그것을 이해하지 않는 한 말이다." 📋 목차 면책 및 법적 고지 간략 요약 기술 설명 영향받는 시스템 개념 증명 영향 평가 완화 및 수정 책임 있는 공개 타임라인 참고 자료 출처 ⚠️ 면책 및 법적 고지 이 도구는 승인된 보안 테스트 전용입니다. 잠깐. 진행하기 전에 이 내용을 읽으십시오. 이...

CVE-2022-47986

CVE-2022-47986 Aspera Faspex Pre Auth RCE https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Poc Usage: root@kitploit: python3 poc.py https://xxxxx whoami...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN 事前認証リモートコード実行 説明 CVE-2022-42475 は、FortiOS の SSL VPN サービスにおけるヒープベースのバッファオーバーフローの脆弱性であり、認証されていない攻撃者が /remote/error エンドポイントを標的とした巧妙に細工された HTTP リクエストを通じて、リモートから任意のコードを実行（RCE）できるようにします。 この脆弱性は、公式パッチが公開される前に実際の攻撃で積極的に悪用されていました（0-day）。 PoC の実行 次のスクリーンショットは、許可されたラボ環境での...

CVE-2025-32433-Eploit

CVE-2025-32433-Eploit Erlang/OTP SSH Vulnerable to Pre-Authentication RCE SSH Erlang RCE Exploit crafting SSH payload to execute an arbitrary Erlang command on the vulnerable server. Usage: root@kitploit: python3 exploit.py -t targets.txt -p 2222 -o results.log Disclaimer: This tool is for...

wp2shell-lab

wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core:...

Exploit for CVE-2026-63030

wp2shell CVE-2026-63030 / CVE-2026-60137 PoC for an unaut...

GHSA-6C99-87FR-6Q7R OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Summary Description A deserialization of untrusted data vulnerability CWE-502 exists in OpenAM's WebAuthn authentication module. Under certain conditions, this may allow an attacker to achieve arbitrary code execution in the context of the application server. This affects OpenAM Community Edition...

Exploit for Embedded Malicious Code in Tukaani Xz

XZ Backdoor Labs CVE-2024-3094 Safe, hands-on labs for...

Exploit for Double Free in Apache Http_Server

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream c...

CVE-2025-34300 Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...

CISA Emergency Directive 21-03: VPN Vulnerabilities Actively Exploited

On April 20, 2021, the Department of Homeland Security Cybersecurity and Infrastructure Security Agency CISA released an alert on the exploitation of Pulse Connect Secure Vulnerabilities with Alert AA21-110A: Exploitation of Pulse Connect Secure Vulnerabilities, as well as Emergency Directive ED...