CVE-2024-34832

CubeCart - Directory Traversal May Lead To RCE CVE-2024-34832 TL;DR In the admin panel, parameters such as g and node are used to construct the path to include .inc.php files and execute PHP code. A malicious user with the ability to upload .inc.php files anywhere on the server can exploit a path...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE mitigations immediately. Severity: Critical. commands...

nodejshell

NODEJSHELL - Reverse shell exploit for NodeJs deserialization CVE-2017-5941 The exploit automatically generates the reverse shell payload which is encoded in decimal and then in base64. After that, this payload is sent via an HTTP POST request that serializes the user input and stores it in a...

CVE-2024-28515

CVE-2024-28515 Description Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Information CNVD has completed verification of this vulnerability, but it has not...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

CyberPanel-RCE

CyberPanel-RCE Exploit for CyberPanel RCE found on v2.3.6 More information availabe on my blog: https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...

DS-Wireless-Communication-Remote-Code-Execution

Exécution de code à distance dans la communication sans fil DS Injecte du code arbitraire dans le jeu d'un client. Prérequis Python 3.10 pip pydivert Utilisation root@kitploit: pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py ID CVE CVE-2023-45887 Licence GNU...

CVE-2018-15133-PoC

CVE-2018-15133-PoC This Python script implements a remote code execution RCE exploit for vulnerable Laravel applications through insecure deserialization, based on the CVE-2018-15133 vulnerability. The exploit takes advantage of a vulnerability in Laravel versions 5.5.40 and earlier, and 5.6.0 to...

cve-2019-11043

PHP Remote Code Execution Vulnerability CVE-2019-11043 1. Background On September 26, PHP officially released a vulnerability advisory pointing out that servers using Nginx + php-fpm, under certain configurations, have a remote code execution vulnerability. Moreover, this configuration is widely...

CVE-2019-7216

CVE-2019-7216 Dans filechucker.cgi version 5.09 et filechuckerprefs.cgi version 4.99e-free-e02, il existe un contournement du filtre, lors du téléversement, qui peut conduire à une exécution de code à distance si l'utilisateur téléverse un fichier malveillant. Le contournement se produit lorsque...

Log4j2-CVE-2021-44228

CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web root@kitploit: mvn dependency:treejava INFO | | +-...

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Chequea si tu firewall es vulnerable a CVE-2024-21762 RCE sin autenticación Para más información sobre la vulnerabilidad: https://cuty.io/TKyfFh Suscribiros o uniros a mis redes sociales para más HACKING!! Aprende a detectar la vulnerabilidad y a...

CVE-2021-46422_RCE

CVE-2021-46422 RCE Instalación root@kitploit: git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt Coloca CVE-2021-46422 RCE.py en el directorio pocsuite3\pocs cd pocs Uso de pocsuite3 URL única: root@kitploit: pocsuite -r...

CVE-2022-1388-rs

CVE-2022-1388-rs Escáner y shell interactivo para CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE escrito en Rust Resumen Para resumir, aquí hay una visión general de las condiciones necesarias de una solicitud para explotar esta vulnerabilidad: El encabezado Connection debe incluir...

CVE-2022-42889-PoC

CVE-2022-42889 también conocido como Text4Shell Prueba de Concepto RCE Text4Shell es el nombre popular de una vulnerabilidad de software crítica descubierta en la biblioteca Apache Commons Text ver CVE-2022-42889. Este repositorio está destinado a demostrar una Ejecución Remota de Código RCE que...

EvilRip

Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...

CVE-2021-27850_POC

CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

CVE-2026-57517

Control Web Panel ≤ 0.9.8.1224 — Inyección SQL Ciega a Ejecución Remota de Código Puerto 2083 → userRes POST → INTO DUMPFILE → Puerto 2031 Webshell → cwpsvc 🔴 Resumen de la Vulnerabilidad CVE-2026-57517 es una inyección SQL ciega crítica previa a la autenticación en versiones ≤ 0.9.8.1224. El...