270255 matches found
CVE-2021-41773
CVE-2021-41773 Description This script exploits CVE-2021-41773 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install root@kitploit: git clone...
rogue-jndi
Rogue JNDI JNDI इंजेक्शन हमलों के लिए एक दुर्भावनापूर्ण LDAP सर्वर। विवरण इस प्रोजेक्ट में डिफ़ॉल्ट रूप से असुरक्षित Java JNDI API का शोषण करने के लिए LDAP और HTTP सर्वर शामिल हैं। हमला करने के लिए, आप इन सर्वरों को स्थानीय रूप से शुरू कर सकते हैं और फिर कमजोर क्लाइंट पर JNDI रिज़ॉल्यूशन ट्रिगर क...
CVE-2026-25548
CVE-2026-25548 — Remote Code Execution in InvoicePlane 1.7.0 Vulnerability: Remote Code Execution via Local File Inclusion + Log Poisoning Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Critical CVSS 3.1 Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CW...
telnet-CVE-2026-24061
https://github.com/SafeBreach-Labs/CVE-2026-24061/blob/main/telnetrce.py you need to understand the code 2. Building working code without input, directly variable = '' The code must be compatible with every device, so you cannot use commands like os.system'command' 3. Adding a GUI via...
CVE-2025-55616
CVE-2025-55616 Author: Rana M.Sinan Adil Vulnerability Found in Zsh leading RCE through History Expression Key Points To Run this exploit: just change the ip address and the "p system" in exploit , because i also tried this in my second laptop, and to change it run this following command in gdb...
CVE-2026-35517
CVE-2026-35517 - تنفيذ الأوامر عن بُعد في Pi-hole FTLDNS عبر حقن الأسطر الجديدة خلاصة سريعة ثغرة تنفيذ أوامر عن بُعد في محرك FTLDNS الخاص بـ Pi-hole الإصدارات 6.0 حتى 6.5 تسمح لمهاجم مُصادَق بحقن توجيهات تكوين dnsmasq عشوائية عن طريق تضمين أحرف أسطر جديدة \n في معامل dns.upstreams الخاص بواجهة AP...
CVE-2026-4747-
CVE-2026-4747: FreeBSD Remote Kernel RCE First remote kernel exploit both discovered and exploited by an AI 📋 Quick Summary...
webcgi-exploits
Web CGI Exploits Here's several exploits related to different web CGIs. I wrote those exploits in last few years. How it works Web app are basicly those layers: 1. applications 2. web frameworks 3. script language engines 4. web containersservers 5. web front proxynginx etc. 4 and 5 could be the...
CVE-2026-33824
🚨 CVE-2026-33824: Exploitation Analysis and Remediation 🎯 Executive Summary CVE-2026-33824 is a critical vulnerability CVSS 9.8/10 in Windows' IKE Internet Key Exchange protocol that allows unauthenticated remote code execution. This is the "memory surgery" every elite attacker seeks: a Double Fr...
CVE-2026-32746
🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...
CVE-2026-21858
CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE Full unauthenticated RCE chain on n8n: 1. CVE-2026-21858 - Content-Type confusion → Arbitrary File Read 2. Read config + database → forge admin JWT 3. CVE-2025-68613 -...
CVE-2026-39987
CVE-2026-39987 — Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...
CVE-2026-33827
🔴 CVE-2026-33827: تنفيذ التعليمات البرمجية عن بُعد RCE في Windows TCP/IP 📌 نظرة عامة CVE-2026-33827 هي ثغرة أمنية حرجة من نوع تنفيذ التعليمات البرمجية عن بُعد RCE تؤثر على حزمة شبكات TCP/IP في Windows. تُصنَّف كخلل سباق Race Condition ناتج عن مزامنة غير صحيحة عند التعامل مع الموارد المشتركة أثناء...
log4shell
Log4Shell This project is a demonstration of how the log4shell security vulnerability works. This vulnerability is described in CVE-2021-44228. The project is intended for educational purposes only. It should only be used on your own system and solely for experimental purposes. Any execution is...
S2-062
S2-062 CVE-2021-31805/s2-062 Batch Scanning and Exploitation Please comply with laws and regulations; unauthorized attacks on website systems are prohibited. Usage Batch Scan Mode root@kitploit: python3 CVE-2021-31805.py -m scan -f 123.txt Command Execution Mode root@kitploit: python3...
CVE-2021-44529
CVE-2021-44529 Vendor Homepage: https://www.ivanti.com/ Software Link: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Version: CSA 4.6 4.5 - EOF Aug 2021 Execute root@kitploit: python3 exploit.py Example root@kitploit: python3 exploit.py 'https://x.x.x.x' 'ls'...
CVE-2026-1731
BeyondTrust CVE-2026-1731 Scanner Professional Python scanner for detecting BeyondTrust Remote Support / Privileged Remote Access exposure. Developer: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability CVE-2026-1731 is a critical...
CVE-2026-1457
CVE-2026-1457: TP-Link VIGI C385 Authenticated Remote Code Execution Overview CVE-2026-1457 is an authenticated buffer overflow vulnerability in the web API of TP-Link VIGI C385 V1. This vulnerability allows authenticated attackers to perform remote code execution RCE. CVSS v4.0 Score: 8.5 High...
wonderplugin
Wonderplugin For RCE DONT USE THIS FAKE PLUGIN ON YOUR PRODUCTION WEB SERVER! This repository purposed for test a vulnerability on wonderCMS, this fake plugin contain backdoor web shell, you can find it on evil.php file. Related Article WonderCMS 3.1.3 - Authenticated RCE & Blind SSRF Vulnerabili...