CVE-2021-44967

CVE-2021-44967: LimeSurvey RCE Description This Proof-of-Concept POC can be used to exploit CVE-2021-44967 to upload and execute a malicious LimeSurvey PHP plugin as administrator to obtain a reverse shell. A Remote Code Execution RCE vulnerabilty exists in LimeSurvey 5.2.4 via the upload and...

Confluence-EvilJar

aaaademo/Confluence-EvilJar Use CVE-2023-22515 to upload a jar package via the backend to achieve RCE. root@kitploit: git clone https://github.com/aaaademo/Confluence-EvilJar cd Confluence-EvilJar mvn package CMDshell root@kitploit: http://confluence.local/plugins/servlet/testbin/cmServlet Godzil...

CVE-2020-5902

CVE-2020-5902 In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof of concept...

MS15-034

MS15-034 MS15-034 POC "The current IIS server version is a vulnerable version with a known vulnerability CVE-2015-1635, MS15-034. Exploiting this vulnerability poses a risk of remote code execution or causing a blue screen of death. Test command: wget --header=""Range:...

CVE-2025-57055

CVE-2025-57055: Authenticated Remote Code Execution in WonderCMS 3.5.0 Vulnerability Mechanics An authenticated Remote Code Execution RCE vulnerability exists in WonderCMS v3.5.0. The issue stems from how the application handles remote theme/module installations via JSON descriptors. When an admi...

CVE-2024-29269

Telesquare TLR-2005KSHRCE CVE-2024-29269 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试，任何非法攻击本人概不负责. Help root@kitploit: / /\ //\ | \ / \ | || | | \ / \ \ / / / \ / /...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...

CVE-2025-21298

CVE-2025-21298 content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of the function is ti...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE mitigations immediately. Severity: Critical. commands...

CVE-2023-38831_ReverseShell_Winrar-RCE

OBTAINING A REVERSE SHELL BY EXPLOITING THE WINRAR VULNERABILITY CVE-2023-38831 In this repository we are going to exploit the WinRAR vulnerability CVE-2023-38831 in order to obtain a reverse shell from the victim Windows machine to the attacker Kali Linux machine. PRELIMINARY STEPS Download the...

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC Description This is my PoC for the CVE-2023-30253 Dolibarr 17.0.0 PHP Code Injection, when the CMS Website plugin core is enabled, an authenticated attacker can obtain remote command execution via php code injection bypassing the application restrictions...

CVE-2021-3129

CVE-2021-3129 CVE-2021-3129-Laravel Debug mode remote code execution vulnerability Affected versions and conditions Laravel = 8.4.2 Ignition 2.5.2 Environment setup docker pull vulhub/laravel:8.4.2 exp usage Download and execute in the same directory as exploit.py: git clone...

CVE-2024-4577-Nuclei-Template

CVE-2024-4577 Nuclei Template This repository contains a Nuclei template to detect the PHP CGI Argument Injection vulnerability identified as CVE-2024-4577. Template Details root@kitploit: id: CVE-2024-4577 info: name: CVE-2024-4577 PHP CGI Argument Injection author: Hüseyin TINTAŞ severity:...

CVE-2021-26295

CVE-2021-26295 CVE-2021-26295 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Any illegal use is strictly prohibited. The user shall bear all consequences. Trigger command execution EXP 1. VPS starts RMI listener on port 9999 root@kitploit: java -cp...

CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

CVE-2020-5902

CVE-2020-5902 Python script to exploit F5 Big-IP CVE-2020-5902 Examples Exploit local file read: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploit RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

CVE-2022-44877-CWP7

CVE-2022-44877-CWP7 Control Web Panel 7 CWP7 Remote Code Execution RCE CVE-2022-44877 Unauthenticated Repository will get updated with POC soon...

-WinVerifyTrust-Signature-Validation-CVE-2013-3900-Mitigation

CVE-2013-3900 is a remote code execution vulnerability in the way Microsoft's WinVerifyTrust function handles Windows Authenticode signature verification. This flaw allows an attacker to modify a signed executable file by adding malicious code to an unverified portion of the file without...