Exploit-For-CVE-2022-36067

Exploit-For-CVE-2022-36067 This repo contains payload for the CVE-2022-36067 How to exploit? Paste the payload given in payload.js along with the command you want to run. Test on local machine. To test on local machine, git clone the repo, install the dependecies and run app.js using node. If the...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...

BlueGate

BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...

CVE-2023-20887

CVE-2023-20887 Exploit VMWare vRealize Network Insight Pre-Authenticated RCE CVE-2023-20887 Usage root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l...

rschunter

RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...

CVE-2020-13945-EXPLOIT

CVE-2020-13945 - Ejecución Remota de Código RCE en Apache APISIX Este repositorio contiene un exploit de prueba de concepto PoC para una vulnerabilidad en Apache APISIX. La vulnerabilidad surge cuando la API de Administración está habilitada y se eliminan las reglas de restricción de IP de acceso...

CVE-2024-7627-PoC

CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...

metasploitable2-vsftpd-writeup

Metasploitable2 — vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux ↔ Metasploitable2 environment. Objective Practice the core penetration testing workflow — reconnaissance,...

CraftCMS_CVE-2023-41892

Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage root@kitploit: python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : root@kitploit: python3 -m pip install requests...

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Exploit de ejecución remota de código RCE en Mirth Connect 🚨 Introducción 📖 Este repositorio contiene un exploit de Prueba de Concepto PoC para una vulnerabilidad crítica en NextGen Healthcare Mirth Connect versiones anteriores a 4.4.1. La vulnerabilidad, registrada como...

CVE-2023-34468

CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code...

cve-2020-11060-poc

CVE-2020-11060 Este script es un exploit basado en Python 3.x para CVE-2020-11060 en versiones de GLPI 0.85-9.4.5. Implementación original: 0xdreadnaught Refactorización en Python3: n3rada El PoC original en ExploitDB ahora está obsoleto porque usaba Python 2.x. La nueva versión ha sido enviada, ...

CVE-2025-31324

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: No logs. No noise. Just signal. // ----- SIGNATURE----- Key: ssh-rsa AAAAB3...NullKey...KFA== Fingerprint:...

CVE-2021-41773

RCE exploit both for Apache 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013: IMHO only "special" setups will be vulnerable to this RCE. Same happens for the "arbitrary file read" exploits you have seen. Both CVEs are indeed almost the same path-traversal vulnerability 2nd one is the uncomplete fi...

cve-2025-49844

CVE-2025-49844 Mi prueba de concepto personal para CVE-2025-49844, también conocido como RediShell. Compilaciones de destino compatibles: Linux x86-64, imagen Docker redis:8.2.1-alpine Linux x86-64, imagen Docker redis:8.2.1-bookworm Es un poco torpe, probablemente no tan bueno como el de Wiz...

CVE-2020-14321

Python script to exploit CVE-2020-14321 - Moodle 3.9 Course enrolments allowed privilege escalation from teacher role into manager role to RCE. Teachers of a course were able to assign themselves the manager role within that course. Payload extracted from:...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Ejecución Remota de Código RCE en Telesquare TLR-2005KSH Se ha identificado un problema en Telesquare TLR-2005Ksh versiones 1.0.0 y 1.1.4 que puede permitir a atacantes ejecutar comandos arbitrarios del sistema explotando el parámetro Cmd. Esta vulnerabilidad podría permitir que...

Dubbo-deserialization

Apache Dubbo Deserialization Vulnerability Research This repository contains research materials, proof-of-concept code, and exploitation tools related to Apache Dubbo deserialization vulnerabilities, primarily focusing on CVE-2020-1948. Repository Structure Directories...

EUVD-2026-72407

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2026-80130

CVE-2026-80130 affects Dell Secure Connect Gateway (SCG) 5.0 , specifically the Appliance (versions prior to 5.36.00.16 ) and the Application (versions prior to 5.36.00.00 ). The root cause is a Relative Path Traversal vulnerability that allows a low-privileged attacker with remote access to achi...