CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

CVE-2024-6387

وصف الثغرة استغلال CVE-2024-6387، يستهدف حالة سباق في معالج الإشارات في خادم OpenSSH sshd على أنظمة Linux القائمة على glibc. نظرًا لاستدعاء دوال غير آمنة للإشارات غير المتزامنة async-signal-unsafe داخل معالج SIGALRM، تسمح هذه الثغرة بتنفيذ كود عن بُعد بصلاحيات الجذر root. ملخص الثغرة تستهدف هذه...

CVE-2023-21716-POC

CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...

ClearML-CVE-2024-24590

root@kitploit: / | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle Artifact Upload PoC This project demonstrates how to dynamically upload a pickle...

cve-2026-41940-tool

🚀 CVE-2026-41940 – cPanel & WHM / WP Squared Auth Bypass Exploitation Tool A comprehensive Python utility to detect , scan in bulk , and exploit the critical authentication bypass vulnerability CVE-2026-41940 in cPanel & WHM and WP Squared. The tool combines multi‑port smart scanning,...

CVE-2024-22514-Remote-Code-Execution

CVE-2024-22514: Remote Code Execution in Agent DVR Information Description iSpyConnect.com Agent DVR 5.1.6.0 contains a vulnerability which allows the file triggered by alert commands to be redirected. The modification can allow the commands function to trigger any file on the system under the...

Onapsis_CVE-2025-31324_Scanner_Tools

Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...

-Spring4Shell-CVE-2022-22965-

-Spring4Shell-CVE-2022-22965-...

CVE-2020-11546

CVE-2020-11546 SuperWebMailer RCE USAGE python3 CVE-2020-11546.py -h, --help show this help message and exit python3 CVE-2020-11546.py -u https://target.com...

CVE-2025-32433_PoC

CVE-2025-32433Erlang-OTP This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running...

CVE-2023-43654

CVE-2023-43654 ShellTorch PyTorch TorchServe में 3 गंभीर कमज़ोरियों की एक श्रृंखला है - यह PyTorch का डिफ़ॉल्ट इन्फ़रेंस सर्वर है। यह एक SSRF कमज़ोरी के लिए एंड-टू-एंड POC है, जो नेटवर्क से मनमाना रिमोट कोड निष्पादन की ओर ले जाती है। 1. TorchServe 0.8.1 चलाएँ root@kitploit: docker run -d --rm -it...

cve-2020-0796

CVE-2020-0796 SMBv3 प्रोटोकॉल में दुर्भावनापूर्ण संपीड़ित पैकेटों को संसाधित करते समय हुई त्रुटि के कारण होता है; पैकेट को डीकंप्रेस करते समय, क्लाइंट द्वारा भेजी गई लंबाई का उपयोग किया जाता है, लेकिन यह जाँच नहीं की जाती कि लंबाई वैध है या नहीं, जिसके परिणामस्वरूप पूर्णांक अतिप्रवाह होता है। यह...

CVE-2025-5961

🚨 Migration, Backup, Staging – WPvivid Backup & Migration 📈 This vulnerability affects a plugin with over700,000+ installs 📝 CVE Details CVE: CVE-2025-5961 CVSS: 7.2 High Published: July 3, 2025 🔍 Description The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is...

CVE-2025-32682

🐚 CVE-2025-32682 - मैपएसवीजी लाइट में मनमाना फ़ाइल अपलोड = 8.5.34 📌 प्लगइन विवरण नाम: MapSVG Lite प्रभावित संस्करण: = 8.5.34 कमजोरी प्रकार: मनमाना फ़ाइल अपलोड CVE आईडी: CVE-2025-32682 प्रकाशित तिथि: 15 अप्रैल, 2025 CVSS स्कोर: 9.9 गंभीर 💥 कमजोरी सारांश WordPress के लिए MapSVG Lite प्लगइन अपने RES...

CVE-2022-28171-POC

CVE-2022-28171-POC I originally published this on ExploitDB, which you can find at https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution root@kitploit: Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...

CVE-2025-6058

⚡ WPBookit = 1.0.4 - Unauthenticated Arbitrary File Upload 📝 Description The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle function, which is hooked via the addbookingtype route in all versions up to, and...

CVE-2025-32583

🚨 CVE-2025-32583 — WordPress PDF 2 Post RCE Exploit CRITICAL Vulnerability CVE-ID: CVE-2025-32583 Severity: 9.9 CRITICAL CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 Description A vulnerability in the PDF 2 Post WordPress plugin developed by termel allows Remote Code Inclusion RCE...

CVE-2025-32118

🚀 CVE-2025-32118 - WordPress CMP Plugin RCE Exploit 🔍 Title: WordPress CMP – Coming Soon & Maintenance plugin = 4.1.13 - Remote Code Execution RCE 🗓️ Published: 2025-04-04 🔐 CWE: CWE-434 - Unrestricted Upload of File with Dangerous Type 📊 CVSS: 9.1 CRITICAL —...

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...

CVE-2025-30911

Exploit for CVE-2025-30911 – WordPress RomethemeKit = 1.5.4 This script exploits a critical vulnerability in the RomethemeKit For Elementor WordPress plugin = v1.5.4 that allows authenticated arbitrary plugin installation and activation , potentially leading to Remote Code Execution RCE. 🛠️...