CVE-2023-6634

CVE-2023-6634 Exploit Script Description This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution RCE due to improper input...

CVE-2025-2005

CVE-2025-2005 - Pwn in WordPress Front-End Users Plugin By h4ckxel Quick Info Plugin: Front-End Users Vulnerable versions: = 3.2.32 Vulnerability Type: Arbitrary File Upload CVSS Score: 10 Critical Risk: Allows any unauthenticated attacker to upload arbitrary files e.g., PHP web shells and execut...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 कमांड इंजेक्शन। pdfkit पैकेज कमांड इंजेक्शन के प्रति संवेदनशील है जहां URL को ठीक से साफ नहीं किया जाता है। नोट: इस समस्या को 0.8.7.2 में ठीक किया गया था, लेकिन पैच अप्रभावी पाया गया। अपडेटेड पैच संस्करण 0.8.7.2 है। PoC HTTP सर्वर शुरू करें...

perl_spreadsheet_excel_rce_poc

ثغرة أمنية في ParseExcel TL;DR: تنفيذ التعليمات البرمجية عن بُعد RCE من منطق تحليل سلاسل التنسيق. شرح مختصر للاستغلال السبب الجذري للاستغلال ينبع من استدعاء eval على مدخلات مستخدم غير مُتحقق منها في Utility.pm...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CVE-2020-9548

CVE-2020-9548：FasterXML/jackson-databind ثغرة تنفيذ التعليمات البرمجية عن بُعد...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE This repository contains an exploit for CVE-2019-16278 in Nostromo Web Server 1.9.6, allowing remote code execution via a directory traversal vulnerability. The script uses pwntools to establish a reverse shell. For educational and authorized testing use only...

CVE-2025-54253-Exploit-Demo

🚨 CVE-2025-54253 – Adobe AEM Forms on JEE OGNL Injection to RCE 🔎 Overview CVE-2025-54253 is a critical OGNL injection vulnerability in Adobe AEM Forms on JEE. It allows unauthenticated attackers to execute arbitrary operating system commands via the /adminui/debug?debug=OGNL: endpoint. Severity:...

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

CVE-2026-56158 — .NET Framework Remote Code Execution RCE PoC Exploit Critical CVSS 9.8 — Deserialization of Untrusted Data CWE-502 in Microsoft .NET Framework & .NET Runtime Patched: July 14, 2026 | Attributed to: Positive Technologies PT-2026-60174 Table of Contents Overview Vulnerability Detai...

CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - Unauthenticated Arbitrary SQL Execution to Remote Code Execution CVE-2024-43918 The WBW Product Table Pro plugin for WordPress is vulnerable to unauthorized arbitrary SQL Execution due to a missing capability check on a function in all versions up to, and...

cve-2020-14882

CVE-2020-14882 Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 POC: root@kitploit: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';";...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE स्यूडोशेल यह स्क्रिप्ट CVE-2023046604 Apache ActiveMQ का उपयोग करके एक स्यूडो शेल उत्पन्न करता है। यह कमजोरी OpenWire प्रोटोकॉल में असुरक्षित डिसीरियलाइज़ेशन के कारण रिमोट कोड निष्पादन की अनुमति देती है। विवरण CVE-2023-46604 एक डिसीरियलाइज़ेशन कमजोरी है जो Apache ActiveMQ के...

CVE-2022-31814

CVE-2022-31814 root@kitploit: Reworked and optimized exploit script of pfBlockerNG 2.1.426 vulnerability Exploit Title: pfBlockerNG 2.1.426 - Remote Code Execution RCE Shodan Results:...

Remot3d

Remot3d - An Easy Way To Exploiting Will be update soon It's easy to create a backdoor in an instant, the backdoor can be used in a remote process via a Linux terminal on the server that runs the PHP Language program. Made to bypass the system that is disabled on the server, especially for readin...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Arbitrary File Upload Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This...

log4j-shell-csw

Log4j Simple Exploit A Proof-Of-Concept Exploit for CVE-2021-44228 vulnerability. Log4j, which is used to log security and performance information, impacts upwards of 3 billion devices that use Java across a variety of consumer and enterprise services, websites and applications, as well as medica...

CVE-2022-32114

Strapi v4.1.12 Vulnerability Explanation: An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file Attack Vectors: After uploading a file containing malicious content, when the user opens the link to t...

CVE-2015-1635-POC

️⃣ CVE-2015-1635-POC HTTP.sys में रिमोट कोड निष्पादन MS15-034...

CVE-2021-40222

CVE-2021-40222 Application : Rittal CMC PU III Web management Appareils : CMC PU III 7030.000 Révision du logiciel : V3.11.002 Révision matérielle : V3.00 Type d’attaque : Exécution de code à distance Solution : Mettez à jour vers la révision logicielle V3.17.10 ou ultérieure Résumé : L'applicati...

weblogic_wls_wsat_rce

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....