270739 matches found
Magento-eCommerce-RCE-CVE-2015-1397
Magento Shoplift ę¼ę“å©ēØ SUPEE-5344 - CVE-2015-1397 ę¦čæ° ę¬čę¬å©ēØ Magento äøē CVE-2015-1397 ę¼ę“ļ¼éåøøē§°äøŗ Magento Shoplift ę¼ę“å©ēØćå®å č®øę»å»č éčæę³Øå „ SQL č½½č·åØ Magento ę°ę®åŗäøåå»ŗę°ēē®”ēåēØę·ć ęåē± Manish Kishan Tanwar error1046 ēØ Python ē¼åļ¼ę¤ēę¬å·²ē± Divine Clown 0xDTC č½¬ę¢äøŗ Bash ļ¼å¹¶ę·»å äŗå儽ēč¾å „ęē¤ŗ仄č¾å „åę®ć ē¹ę§ åę®ęē¤ŗ ļ¼åØęęē¤ŗč¾å „ē®ę URLćē®”ēåēØę·åååÆē ć éčÆÆå¤ē...
CVE-2022-29078
CVE-2022-29078 | EJS SSTI ā RCE White Hat School 4.ĀŖ generaciĆ³n clase 32 - Woo Sang-beom @taka3636 Resumen La vulnerabilidad de inyecciĆ³n de plantillas del lado del servidor SSTI en EJS , como en Hello . Internamente, EJS compila la cadena de la plantilla en una funciĆ³n de JavaScript y luego la...
CVE-2023-4220
Proof of concept exploit for CVE-2023-4220 Affected product : Chamilo = 1.11.24 This CVE abuses an unauthenticated file upload vulnerability in Chamilo 1.11.24 and lower. An attacker has the ability to upload PHP files with no restrictions, leading to RCE. How to use root@kitploit: python3...
CVE-2025-26633
CVE-2025-26633 - MSC EvilTwin PoC Proof of Concept PoC for CVE-2025-26633 vulnerability exploiting Microsoft Management Console MMC About This PoC simulates the CVE-2025-26633 vulnerability, discovered by Trend Micro, which exploits the loading of malicious .msc files for remote command execution...
CVE-2025-58180
CVE-2025-58180 RCE in OctoPrint via Unsanitized Filename in File Upload In OctoPrint version =1.11.2, an attacker with file upload access e.g., valid API key or session can craft a malicious filename that bypasses sanitization and is later executed by OctoPrintās event system, leading to remote...
cve-2025-55182-poc
CVE-2025-55182 React2Shell - Academic Proof of Concept ā ļø DISCLAIMER: EDUCATIONAL USE ONLY This repository contains functional exploit code for a critical vulnerability CVSS 10.0. It is intended strictly for academic research, security analysis, and educational purposes. Do not use this code...
CVE-2019-19609-POC-Python
The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...
Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-
Vulnerabilidad RCE del demonio del Protocolo Punto a Punto CVE-2020-8597- Instituto de TecnologĆa de la InformaciĆ³n de Sri Lanka root@kitploit: AsignaciĆ³n 1 M. P. D. M. Dias IT19165530 MLBWDY2S113.1 Vulnerabilidad RCE del demonio del Protocolo Punto a Punto CVE-2020-8597 ProgramaciĆ³n de Sistemas ...
CVE-2023-51385_test
Verifying CVE-2023-51385 First, add the following content to /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p There is a command injection in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/b...
Hacking-pdf.js-vulnerability
šØ CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js This project demonstrates and analyzes CVE-2024-4367 , a high-severity vulnerability in Mozillaās PDF.js library that allows arbitrary JavaScript execution through improper type checking in font handling code. Our research shows how a...
westone-CVE-2021-21972-scanner
westone-CVE-2021-21972-scanner Vulnerabilidad de ejecuciĆ³n remota de cĆ³digo en VMware vCenter Server. Un atacante malicioso con acceso al puerto 443 puede enviar una solicitud cuidadosamente construida al vCenter Server, lo que eventualmente provocarĆ” la ejecuciĆ³n remota de cĆ³digo arbitrario...
exploit_cve_2025_67303
exploitcve202567303 Create PoC for CVE-2025-67303 PoC original is https://www.doyensec.com/resources/DoyensecAdvisoryComfyUIManagerRCEviaCustomNodeInstall.pdf...
CVE-2024-56264
CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate a...
ExploitPOC_MS15-014_CVE-2015-0009
This repository does not have a README...
CVE-2024-10629
CVE-2024-10629 GPX Viewer = 2.2.8 - Authenticated Subscriber+ Arbitrary File Creation Description: The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and...
CVE-2026-53576
Kestra Unauthenticated RCE Exploit CVE-2026-53576 Critical Authentication Bypass leading to Unauthenticated Remote Code Execution Exploit ā¢ Vulnerability Details ā¢ Impact ā¢ Remediation ā ļø DISCLAIMER This tool is for educational and authorized security testing purposes only. DO NOT use this against...
cve-2025-55182
CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container root@kitploit: docker build -t cve-2025-55182:lab...
Apache-CVE-2021-42013-RCE-Exploit
š Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...