271409 matches found
CVE-2025-59287---WSUS-SCCM-RCE
CVE-2025-59287 - WSUS / SCCM RCE Based on the original exploit at: https://gist.github.com/hawktrace/76b3ea4275a5e2191e6582bdc5a0dc8b You can now specify the ysoserial.exe and execute whatever you want: https://hawktrace.com/blog/cve-2025-59287/ https://hawktrace.com/blog/cve-2025-59287-unauth/...
CVE-2025-54123
CVE-2025-54123 Overview Authenticated Remote Code Execution in HoverFly's middleware API endpoint due to insufficient input validation and unsafe command execution. Attack Flow 1. Authentication Attacker authenticates to HoverFly using valid credentials or session token Obtains Bearer token via...
Flowise-RCE
Flowise-RCE CVE-2025-58434 & CVE-2025-59528...
EXPLOIT-CVE-2026-56121
CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView gRPC Deserialization Unauthenticated remote code execution in Feast 0.63.0 via unsafe dill.loads deserialization in the registry gRPC server. This repository contains a self-contained proof-of-concept exploit and a Dockerized vulnerable...
CVE-2025-49132
Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...
CVE-2023-43208-PoC
Mirth Connect RCE Exploit CVE-2023-43208 This script is a Proof of Concept PoC for the Remote Code Execution RCE vulnerability in Mirth Connect versions prior to 4.4.1. It exploits an XStream deserialization vulnerability through the API. Requirements Python 3.10 or higher Compatible with 3.13...
CVE-2026-5817-PoC
CVE-2026-5817: Docker Model Runner container-to-host RCE / Escape Any container on a Docker Desktop 4.40.0 to 4.67.x host can run code on the host with two HTTP requests. No socket mount, no --privileged, no caps. How Every container can reach Model Runner at model-runner.docker.internal with no...
struts-s2-052-deserialization-rce-lab
Apache Struts S2-052 XML Deserialization RCE This repository demonstrates exploitation of Apache Struts S2-052 CVE-2017-9805 using malicious XML deserialization. The exploit was developed while solving the INE eWPTX Practice Range – Struts XML Deserialization RCE lab. Vulnerability Overview Apach...
CVE-2024-9707
CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the...
lab-cve-2025-57819
Work in Progress FreePBX CVE-2025-57819 Lab - Unauth SQLi → RCE Chain Nuclei POC Spin up a reproducible FreePBX 15 lab Docker to validate CVE-2025-57819 — a critical unauthenticated SQL injection in userman AJAX endpoints that can be chained to RCE. Includes a working Nuclei template...
CVE-2024-23897-Vulnerabilidad-Jenkins
Exploitation of Vulnerability CVE-2024-23897 in Jenkins Vulnerability Description: CVE-2024-23897 CVE-2024-23897 is a critical vulnerability discovered in Jenkins, a popular continuous integration tool. This vulnerability allows remote command execution RCE on the Jenkins server due to a lack of...
CVE-2014-6271
🚨 CVE-2014-6271 — “Shellshock” 25-Year Zero-Day Remote Code Execution in GNU Bash via Environment Variables 📖 Overview CVE-2014-6271 , nicknamed Shellshock also known as Bashdoor, is a critical remote code execution RCE vulnerability in the GNU Bash shell. An attacker can send specially crafted...
CVE-2025-49113-Roundcube-RCE
CVE-2025-49113 — Roundcube Post-Auth RCE via PHP Object Deserialization Overview...
CVE-2011-2523-exploit
CVE-2011-2523 Exploit vsFTPd 2.3.4 Backdoor This project demonstrates exploitation of the vsFTPd 2.3.4 backdoor vulnerability CVE-2011-2523 using Python and pwntools. Disclaimer: This project is for educational and authorized penetration testing purposes only. Do NOT use against systems without...
CVE-2025-47812
CVE-2025-47812 — Wing FTP Server Unauthenticated RCE root@kitploit: ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║...
Penetration-Testing-Assessment-23-04-2026
Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...
CVE-2025-32434-exploit
Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...
PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276
Authenticated PRTG network Monitor remote code execution Based on https://www.exploit-db.com/exploits/46527 Usage: simply manually edit the script to include your Target URL, admin username and password like so: root@kitploit: TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin201...
CVE-2025-50286
Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...