CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated Install Grab Repo root@kitploit: $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Setup Note: Install the latest version of node root@kitploit: $ npm init $ npm i axios cheerio yargs Usage root@kitploit:...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution RCE in Apache Tomcat. This vulnerability works on versions 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81. Tested only on 8.0.24. Vulnerability uses misconfigured PUT option on the...

CVE-2024-51567

CVE-2024-51567 Exploit Script CVE-2024-51567 is a Python proof-of-concept PoC exploit script for CVE-2024-51567 , a critical command injection vulnerability affecting CyberPanel v2.3.6. This vulnerability, found in the upgrademysqlstatus endpoint, enables remote command execution RCE by bypassing...

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap script. https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ Usage: root@kitploit: $ python usermapscript.py RHOST -- The target address RPORT -- The target port TCP : 139 LHOST -- The listen address LPORT -- The listen port Installation...

Watchguard-RCE-POC-CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 Watchguard RCE POC CVE-2022-26318 The CVE for this issue is CVE-2022-26318...

CVE-2022-29078

CVE-2022-29078 Simple PoC for CVE-2022-29078 vuln ejs 3.1.6 Usage root@kitploit: git clone https://github.com/chuckdu21/CVE-2022-29078.git cd CVE-2022-29078 python3 CVE-2022-29078.py A prompt will appear to execute commands root@kitploit: $ id uid=0root gid=0root groupes=0root...

CVE-2026-33937

CVE-2026-33937 — Handlebars.js AST Injection RCE Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. Overview CVE-2026-33937 is a type confusion vulnerability in Handlebars.js. The Handlebars.compile function accepts both a template string and a pre-parsed AST objec...

ApacheStruts-CVE-2018-11776

Apache Struts CVE-2018-11776 Python PoC This is based on https://github.com/hook-s3c/CVE-2018-11776-Python-PoC. The container build and instructions did not work as described in the README so this fork was created. The POC exploit used is from Rapid7. Shoutout: hook-s3c github.com/hook-s3c,...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3 faker...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Technical Analysis A technical root cause analysis of the vulnerability, indicators of compromise, and internet exposure can be found on our blog: https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise...

cve-2022-42889-intercept

cve-2022-42889-intercept For versions below Java 11, special attention is required, as higher versions have already removed the Javascript interpreter. This solution targets Java 8. Intercept illegal parameters via JVM startup parameters and jps pid. quick start root@kitploit:...

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadata Severity: Critical 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module 15.0.66, 16.0.89 and 17.0.3 Tested On: FreePBX 16.0.40.7 on CentOS 7 with Apache 2.4...

CVE-2024-40711-Exp

Usages root@kitploit: .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" root@kitploit: Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp,...

CVE-2019-15107

CVE-2019-15107 Webmin 1.890 Unauthenticated Remote Code Execution This script is designed to exploit unauthenticated command execution vulnerability in Webmin 1.890. It allows you to execute arbitrary commands on a target Webmin server or to obtain a reverse shell. Usage The exploit takes 5...

CVE-2017-3506

What is this? This is a poc of CVE-2017-3506Weblogic XMLDecoder Serialization How to use it? check vul root@kitploit: java -jar WebLogic-XMLDecoder.jar -u http://192.168.174.144:7001 GetShell root@kitploit: java -jar WebLogic-XMLDecoder.jar -s http://192.168.174.144:7001...

MDaemon-Advisories

MDaemon-Advisories MDaemon Advisories: CVE-2021-27180 Reflected XSS CVE-2021-27181 CSRF Token Fixation CVE-2021-27182 Iframe injection CVE-2021-27183 Remote Code Execution Those vulnerabilities were already patched on January 2021 and are published for CVE purposes. They can be chained to achieve...

CVE-2020-11851

CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...

CVE-2019-9978

CVE-2019-9978 WordPress Plugin Social Warfare RCE Vulnerability 3.5.3 🐞 Minimal simulated from vulnerable plugin and exploit it 🥰 Installation Of Vulnerable Plugin Install dependencies: root@kitploit: docker-compose build Start vulnerable and attacker server containers root@kitploit: docker-compo...

Node.js-CVE-2024-39943

Node.js HFS Command Execution Vulnerability CVE-2024-39943 White Hat School 3rd – Jeongmin Noh @JenmrR Summary In a Node.js-based HFS server environment, there is a vulnerability where the content of an uploaded file is executed via childprocess.execSync. An attacker can directly execute OS...

CVE-2020-14882

CVE-2020-14882 coherence shellsession calc.exe root@kitploit: import requests url = 'http://:/console/images/%252E%252E%252Fconsole.portal' \ '?nfpb=true&pageLabel=HomePage1&handle=com.tangosol.coherence.mvel2.sh.ShellSession' ...