CVE-2019-9978-Social-Warfare-WordPress-RCE

🚀 CVE-2019-9978 – Social Warfare WordPress Plugin RCE ⚠️ DISCLAIMER: This repository is for educational and authorized security testing only. Use only on systems you own or have explicit written permission to test. Unauthorized access is illegal. 📋 Overview...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Arbitrary File Read → SECRETKEYBASE Theft → RCE Overview CVE-2026-66066 is a critical-severity CVSS 9.5 pre-authentication arbitrary file read to remote code execution chain in Ruby on Rails Active Storage, affecting Rails 7.2.0–7.2.3...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Fix A corrected version of the Mobile Mouse 3.6.0.4 remote code execution exploit published as EDB-51010. Vulnerability CVE: CVE-2023-31902 Affected version: Mobile Mouse 3.6.0.4 Default port: TCP/9099 What Was Fixed The original exploit successfully downloads the paylo...

pickle_exploit

PickleExploit Demonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML 🖥️ This script was developed by h3x0v3rl0rd. This proof of concept PoC demonstrates a potential security vulnerability involving the serialization and deserialization of Python objects using the...

Webmin1.910_exploit

Webmin 1.910 Remote Code Execution Exploit Description: This repository contains a Python 3 script designed to exploit a remote code execution vulnerability in Webmin version 1.910. The script utilizes the sessionlogin.cgi endpoint to perform authentication and deploy a reverse shell payload,...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - WooCommerce Product Slider Pro दुर्भावनापूर्ण सॉफ़्टवेयर प्रत्यारोपण RCE परामर्शदाता-शैली साइबर सुरक्षा रिपोर्ट वूकॉमर्स प्लगइन आपूर्ति-श्रृंखला जोखिम के लिए पेशेवर भेद्यता मूल्यांकन रिपोर्ट, जिसमें व्यावसायिक प्रभाव, सुधार और शमन रणनीति शामिल है। 📍 रिपोर्ट स्नैपशॉट...

php_filter_chain_generator

مولّد سلسلة فلاتر PHP أداة سطر أوامر لتوليد سلسلة فلاتر PHP؛ احصل على RCE دون رفع ملف إذا كنت تتحكم بالكامل في المعامل المُمرَّر إلى require أو include في PHP! الاستخدام المساعدة root@kitploit: $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN...

php_filter_chain_generator

PHP filter chain generator A CLI to generate PHP filters chain, get your RCE without uploading a file if you control entirely the parameter passed to a require or an include in PHP! Usage Help root@kitploit: $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain...

HTB-Silentium-Writeup

HTB - Silentium Writeup Machine Info Name: Silentium OS: Linux Difficulty: Easy CVEs: CVE-2025-58434, CVE-2025-59528, CVE-2025-8110 Enumeration Nmap Scan root@kitploit: nmap -sC -sV -p- --min-rate 5000 -oN nmap.txt Open ports: 22 SSH, 80 HTTP Virtual Hostsstaging.silentium.htb runs Flowise 3.0.5...

CVE-2024-10586-Poc

Vulnerability Information Description The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated...

cve-2026-31900-lab

CVE-2026-31900 — Vulnerable Lab psf/black GitHub Action RCE via Insecure Regex Validation...

CVE-2024-9932-POC

CVE-2024-9932-POC Description: The Wux Blog Editor WordPress plugin is vulnerable to arbitrary file uploads due to insufficient file type validation in the wuxbtinsertImageNew function. Versions up to and including 3.0.0 are affected. This vulnerability allows unauthenticated attackers to upload...

document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDF Clickable Link RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for document viewer link-handler risk, including impact analysis, remediation, and mitigation strategy. 📍 Report Snapshot...

apache-mina-deserialization-security-assessment

CVE-2024-52046 - Apache MINA Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Apache MINA deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...

CVE-2026-52813-Gogs-RCE

CVE-2026-52813 — Gogs Path Traversal Leading to Git Hooks Remote Code Execution Defensive Analysis Security research / Blue team writeup. This repository does not contain weaponized PoC. Researchers needing reproduction should use the public PoC referenced in the official advisory. Item| Content...

moodle-rce-calculatedquestions

Scripts to Test Input Validation in Moodle Calculated Questions CVE-2024-43425 This repository contains the companion scripts to the blog post Back to School - Exploiting a Remote Code Execution Vulnerability in Moodle, which describes a remote code execution vulnerability in the Moodle learning...

Solr-RCE-CVE-2019-0192

Solr-RCE-CVE-2019-0192 Apache Solr remote code execution via dataImportHandler Target Solr version: 1.3 – 8.2 Requirements: DataImportHandler should be enabled, which is not by default. I have tested on version 6.2 python python solrRCE.py...

CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress = 2.3.3 - Unauthenticated Arbitrary File Upload Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check o...

CVE-2025-22777

CVE-2025-22777 GiveWP – Donation Plugin and Fundraising Platform = 3.19.3 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.3 via...