CVE-2023-50164

Exploit CVE-2023-50164 for HackTheBox Lab Description This exploit was developed specifically for the Strutted lab from HackTheBox , aiming to exploit the vulnerability CVE-2023-50164 in Apache Struts 2. The flaw allows path traversal through a fault in handling file upload parameters. The exploi...

CVE-2021-44228

Log4Shell Proof-Of-Concept This repository is a Proof-Of-Concept for CVE-2021-44228 vulnerability. It is derived from This Repo. In this repository I have made an example of a vulnerable application and a demonstration of how to exploit it. Proof-of-concept Components I have modified the upstream...

CVE-2022-0944_RCE_Automation

I am not the researcher who found the exploit just the author of this code. This code is intended for educational purposes only...

CVE-2017-1000486

CVE-2017-1000486 This is a PoC of CVE-2017-1000486 with some payloads useful to bypass blacklisting lexicographic checks on standard functions used to achieve RCE getClass, exec, etc.. and for retrieving primefaces secret through Padding Oracle in order to be less noisy possible on exploitation...

CVE-2019-5420

CVE-2019-5420 PoC A remote code execution vulnerability in development mode Rails 5.2.2.1, 6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code...

CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

CVE-2024-6387

وصف الثغرة استغلال CVE-2024-6387، يستهدف حالة سباق في معالج الإشارات في خادم OpenSSH sshd على أنظمة Linux القائمة على glibc. نظرًا لاستدعاء دوال غير آمنة للإشارات غير المتزامنة async-signal-unsafe داخل معالج SIGALRM، تسمح هذه الثغرة بتنفيذ كود عن بُعد بصلاحيات الجذر root. ملخص الثغرة تستهدف هذه...

CVE-2023-21716-POC

CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...

ClearML-CVE-2024-24590

root@kitploit: / | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle Artifact Upload PoC This project demonstrates how to dynamically upload a pickle...

cve-2026-41940-tool

🚀 CVE-2026-41940 – cPanel & WHM / WP Squared Auth Bypass Exploitation Tool A comprehensive Python utility to detect , scan in bulk , and exploit the critical authentication bypass vulnerability CVE-2026-41940 in cPanel & WHM and WP Squared. The tool combines multi‑port smart scanning,...

CVE-2024-22514-Remote-Code-Execution

CVE-2024-22514: Remote Code Execution in Agent DVR Information Description iSpyConnect.com Agent DVR 5.1.6.0 contains a vulnerability which allows the file triggered by alert commands to be redirected. The modification can allow the commands function to trigger any file on the system under the...

Onapsis_CVE-2025-31324_Scanner_Tools

Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...

-Spring4Shell-CVE-2022-22965-

-Spring4Shell-CVE-2022-22965-...

CVE-2020-11546

CVE-2020-11546 SuperWebMailer RCE USAGE python3 CVE-2020-11546.py -h, --help show this help message and exit python3 CVE-2020-11546.py -u https://target.com...

CVE-2025-32433_PoC

CVE-2025-32433Erlang-OTP This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running...

CVE-2023-43654

CVE-2023-43654 ShellTorch PyTorch TorchServe में 3 गंभीर कमज़ोरियों की एक श्रृंखला है - यह PyTorch का डिफ़ॉल्ट इन्फ़रेंस सर्वर है। यह एक SSRF कमज़ोरी के लिए एंड-टू-एंड POC है, जो नेटवर्क से मनमाना रिमोट कोड निष्पादन की ओर ले जाती है। 1. TorchServe 0.8.1 चलाएँ root@kitploit: docker run -d --rm -it...

cve-2020-0796

CVE-2020-0796 SMBv3 प्रोटोकॉल में दुर्भावनापूर्ण संपीड़ित पैकेटों को संसाधित करते समय हुई त्रुटि के कारण होता है; पैकेट को डीकंप्रेस करते समय, क्लाइंट द्वारा भेजी गई लंबाई का उपयोग किया जाता है, लेकिन यह जाँच नहीं की जाती कि लंबाई वैध है या नहीं, जिसके परिणामस्वरूप पूर्णांक अतिप्रवाह होता है। यह...

CVE-2025-5961

🚨 Migration, Backup, Staging – WPvivid Backup & Migration 📈 This vulnerability affects a plugin with over700,000+ installs 📝 CVE Details CVE: CVE-2025-5961 CVSS: 7.2 High Published: July 3, 2025 🔍 Description The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is...

CVE-2025-32682

🐚 CVE-2025-32682 - मैपएसवीजी लाइट में मनमाना फ़ाइल अपलोड = 8.5.34 📌 प्लगइन विवरण नाम: MapSVG Lite प्रभावित संस्करण: = 8.5.34 कमजोरी प्रकार: मनमाना फ़ाइल अपलोड CVE आईडी: CVE-2025-32682 प्रकाशित तिथि: 15 अप्रैल, 2025 CVSS स्कोर: 9.9 गंभीर 💥 कमजोरी सारांश WordPress के लिए MapSVG Lite प्लगइन अपने RES...

CVE-2022-28171-POC

CVE-2022-28171-POC I originally published this on ExploitDB, which you can find at https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution root@kitploit: Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...