CVE-2025-55182-POC-SCANNER

CVE-2025-55182: RCE Crítica de Pré-Autenticação em Componentes de Servidor React Pesquisa de Segurança porschema.cx "Controle é uma ilusão. São os sistemas que construímos que nos controlam—a menos que primeiro os entendamos." 📋 Índice Aviso Legal & Isenção de Responsabilidade Resumo Executivo...

CVE-2025-32433-Eploit

CVE-2025-32433-Eploit Erlang/OTP SSH vulnerável a RCE de pré-autenticação Exploit de RCE SSH Erlang Criação de payload SSH para executar um comando Erlang arbitrário no servidor vulnerável. Uso: root@kitploit: python3 exploit.py -t targets.txt -p 2222 -o results.log Aviso legal: Esta ferramenta é...

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence Pre-Authentifizierung RCE...

CVE-2022-47986

CVE-2022-47986 Aspera Faspex Pre Auth RCE https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ PoC Nutzung: root@kitploit: python3 poc.py https://xxxxx whoami...

cve-2024-38077-madlicense_reproduction

CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution "MadLicense" I. भेद्यता अवलोकन CVE ID : CVE-2024-38077 उपनाम : MadLicense CVSS स्कोर : 9.8 गंभीर प्रकार : हीप-आधारित बफर ओवरफ़्लो CWE-122 खोजकर्ता : Ver, Lewis Lee, Zhiniang Peng विवरण : Windows Remote Desktop Licensin...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Remote-Codeausführung vor der Authentifizierung Beschreibung CVE-2022-42475 ist eine Schwachstelle Heap-basierter Pufferüberlauf im SSL-VPN-Dienst von FortiOS, die es nicht authentifizierten Angreifern ermöglicht, über speziell gestaltete HTTP-Anfragen an den...

metabase-pre-auth-rce-poc

Metabase Pre-Auth RCE CVE-2023-38646 POC Dies ist ein in Python geschriebenes Skript, das die Ausnutzung der in CVE-2023-38646 beschriebenen Sicherheitslücke der Metabase -Software ermöglicht. Das System ist in Versionen vor 0.46.6.1 der Open-Source-Edition und vor 1.46.6.1 der Enterprise-Edition...

wp2shell-lab

wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core:...

Exploit for CVE-2026-63030

wp2shell CVE-2026-63030 / CVE-2026-60137 PoC for an unaut...

GHSA-6C99-87FR-6Q7R OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Summary Description A deserialization of untrusted data vulnerability CWE-502 exists in OpenAM's WebAuthn authentication module. Under certain conditions, this may allow an attacker to achieve arbitrary code execution in the context of the application server. This affects OpenAM Community Edition...

Exploit for Embedded Malicious Code in Tukaani Xz

XZ Backdoor Labs CVE-2024-3094 Safe, hands-on labs for...

Exploit for Double Free in Apache Http_Server

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream c...

CVE-2025-34300 Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...

CISA Emergency Directive 21-03: VPN Vulnerabilities Actively Exploited

On April 20, 2021, the Department of Homeland Security Cybersecurity and Infrastructure Security Agency CISA released an alert on the exploitation of Pulse Connect Secure Vulnerabilities with Alert AA21-110A: Exploitation of Pulse Connect Secure Vulnerabilities, as well as Emergency Directive ED...