CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

CVE-2022-33980-Apache-Commons-Configuration-RCE

CVE-2022-33980-Apache-Commons-Configuration-RCE...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – Insecure Permissions following Remote Code Execution Authenticated Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Version: 2.1.15 Installation root@kitploit: git clone...

Eaton-UPS-Companion-Exploit

نظرة عامة يتحقق برنامج Eaton UPS Companion من وجود تحديث كل أسبوع عبر اتصال HTTP غير آمن ويقوم بتنفيذ eval لمحتوى عنوان URL الخاص بالتحديث. وهذا يسمح للمهاجم بصياغة دالة JavaScript تستخدم عمليات نظام التشغيل منخفضة المستوى الموجودة بالفعل في البرنامج الخلفي، مثل تنفيذ الملفات ومآخذ الشبكة...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

CVE-2024-26304-RCE-exploit

CVE-2024-26304 - Remote Code Execution Vulnerability in ArubaOS Overview CVE-2024-26304 is a critical remote code execution RCE vulnerability affecting ArubaOS due to a buffer overflow in its L2/L3 Management service. An attacker can exploit this by sending specially crafted packets to the PAPI...

CVE-2021-26084_Confluence

CVE-2021-26084Confluence Exploit CVE 2021 26084 Confluence dock0d1@arch$ python rce.py...

cve-2021-41773

cve-2021-41773 ثغرة اجتياز المسار CVE-2021-41773 في Apache 2.4.49. إثبات اختراق RCE إثبات الاختراق الحمولة curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh تابعنا Vulnmachines...

CVE-2023-33669

Exploit CVE-2023-33669 Exploit pour une vulnérabilité de débordement de pile dans le routeur Tenda AC8, ciblant spécifiquement la version de firmware USAC8V4.0siV16.03.34.06. Page officielle du produit. Émulation Vous pouvez placer le fichier 'prepare.sh' dans le répertoire racine du firmware et...

CVE-2021-21985

CVE-2021-21985 يحتوي عميل vSphere HTML5 على ثغرة تنفيذ تعليمات برمجية عن بُعد بسبب عدم التحقق من صحة الإدخال في المكون الإضافي Virtual SAN Health Check الذي يتم تمكينه افتراضيًا في vCenter Server. قامت VMware بتقييم خطورة هذه المشكلة لتكون في نطاق الخطورة الحرجة مع حد أقصى للدرجة الأساسية CVSSv3...

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎 Overview: CVE-2025-47812 is a critical remote code execution RCE vulnerability affecting Wing FTP Server versions prior to 7.4.4. It was discovered by a security researcher and has been confirmed to be actively exploited in the wild. 🧱 Root...

CVE-2024-33438

Arbitrary File Upload Leads to RCE CVE-2024-33438 CubeCart After running it, this is the expected output for a successful exploitation: root@kitploit: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please...

CVE-2024-57376

CVE-2024-57376 Pre-auth remote code execution exploit for D-Link DSR-250 and DSR-250N Security advisory: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Usage root@kitploit: $ python3 exploit.py usage: Example root@kitploit: $ python3 exploit.py 192.168.1.1 443 id...

CVE-2019-6340

CVE-2019-6340 For educational purposes only Run root@kitploit: $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 Exploit GET root@kitploit: $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...

CVE-2024-53677-Docker

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code executio...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC This is the Proof-of-concept exploit code for three vulnerabilities discovered by Jonas Mattsson and Hugo van den Toorn at Outpost24 Ghost Labs. These vulnerabilities are discovered in the web server component on a Pyrescom Termod4 time control machine. These vulnerabilities c...

spring-core-rce

Spring Core RCE/CVE-2022-22965 Сфера влияния: Spring Framework и производные фреймворки на JDK=9 Ссылка на статью Скрипт предназначен только для изучения. Автор не несет ответственности за любое другое использование. 1.Установка root@kitploit: pip3 install -r requirements.txt 2.Использование...

c0ntextomy

c0ntextomy an informal fallacy and a type of false attribution in which a passage is removed from its surrounding matter in such a way as to distort its intended meaning Wikipedia - Contextomy A Proof of Concept demonstrating the vulnerability with a debug session hijack, remote code execution, a...

CVE-2020-8813-Cacti-RCE-in-graph_realtime

CVE-2020-8813 - RCE through graphrealtime.php in Cacti 1.2.8 Features RCE through graphrealtime.php in Cacti 1.2.8 Live mode Execute a single command Verbose mode Description...

CVE-2024-3400

CVE-2024-3400 Exploit for GlobalProtect CVE-2024-3400 This exploit targets the original vulnerability, so the firewall must be running a vulnerable PAN-OS version and must have telemetry enabled. Ref: https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/ Sample...