cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container root@kitploit: docker build -t cve-2025-55182:lab...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

CVE-2018-6574-go-get-RCE

This repository does not have a README...

ms08-067.py

📖 Overview This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Python3 Authorized testing...

magento2-template-filter-patch

Magento 2 टेम्पलेट फ़िल्टर पैच CVE-2022-24086, CVE-2022-24087 के लिए Magento 2 के लिए CVE-2022-24086, CVE-2022-24087 पैच। गहन टेम्पलेट चर एस्केपिंग करके RCE भेद्यता और संबंधित बगों को ठीक करता है। यदि आप Magento को अपग्रेड नहीं कर सकते या आधिकारिक पैच लागू नहीं कर सकते, तो इसे आज़माएँ। पृष्ठभूमि...

Openfire-RCE-CVE-2023-32315-

This repository does not have a README...

CVE-2026-54420

CVE-2026-54420 LiteSpeed cPanel ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below...

CVE-2026-45447

🚨 CVE-2026-45447 - Critical OpenSSL Use-After-Free Vulnerability Heap Use-After-Free in PKCS7verify allowing memory corruption, crashes, and potential remote code execution. 📖 Executive Summary CVE-2026-45447 is a critical vulnerability in OpenSSL's PKCS7 verification functionality. The flaw exis...

cve-2025-55182-scanner

CVE-2025-55182 Indicator Scanner This repository provides a Python-based scanner for indicators of compromise related to CVE-2025-55182 React Server Components RCE and the specific multi-stage malware described in the Asleepace incident report. It is designed to run on Linux and macOS and focuses...

CVE-2025-55182

Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...

CVE-2021-22911-RocketChat

CVE-2021-22911 — Rocket.Chat 3.12.1 RCE Improvised Description Exploits a pre-auth NoSQL injection vulnerability in Rocket.Chat 3.12.1 to leak the admin's TOTP secret and password reset token, take over the admin account, and achieve RCE via a malicious webhook integration. Affected Version...

TimeInjector

TimeInjector TimeInjector एक CVE-2018-14714 शोषण स्क्रिप्ट है जो bash में लिखी गई है। यह पता लगाने के लिए कि लक्ष्य असुरक्षित है या नहीं, स्क्रिप्ट पहले जाँच करती है कि लक्ष्य तक पहुँचा जा सकता है या नहीं और क्या वह एक लॉगिन सत्र स्थापित कर सकती है। उसके बाद, यह विशिष्ट पृष्ठों के अस्तित्व की जाँ...

CVE-2024-28397-js2py-Sandbox-Escape

Perkenalan 中文 js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javscript code on websites. There is a vulnerability in the implementation of global variables within js2py, which could allow an attacker t...

Blackash-CVE-2025-14558

🚨 CVE-2025-14558 : Critical Remote Code Execution in FreeBSD IPv6 🧠 Overview CVE-2025-14558 is a critical Remote Code Execution RCE vulnerability affecting FreeBSD systems that use IPv6 router solicitation services. A flaw in how untrusted network input is handled allows attackers to execute...

CVE-2021-41773

Apache 2.4.49 Path Traversal + Remote Code Execution CVE-2021-41773 Vulnerability Description This vulnerability affects versions of Apache HTTP Server 2.4.49. A path validation error allows remote attackers to perform Path Traversal using sequences like .%2e/ to access paths outside the configur...

CVE-2024-40110

Sourcecodester Poultry Farm Management System v1.0 में बिना प्रमाणीकरण के रिमोट कोड निष्पादन के लिए प्रूफ ऑफ कॉन्सेप्ट PoC यह रिपॉजिटरी Sourcecodester Poultry Farm Management System v1.0 में एक बिना प्रमाणीकरण के रिमोट कोड निष्पादन RCE कमजोरी को प्रदर्शित करने वाली एक प्रूफ ऑफ कॉन्सेप्ट PoC...

CVE-2025-33053-POC

CVE-2025-33053 - WebDAV रिमोट कोड एक्ज़िक्यूशन RCE PoC और C2 सिमुलेशन ⚠️ केवल शैक्षिक उद्देश्यों के लिए यह प्रोजेक्ट WebDAV और .url फ़ाइल डिलीवरी का शोषण करके यथार्थवादी रिमोट कोड एक्ज़िक्यूशन प्राप्त करने वाला एक प्रूफ-ऑफ-कॉन्सेप्ट प्रदर्शित करता है। इसमें एक डिकॉय-आधारित एक्ज़िक्यूटेबल और...

CVE-2021-38163

CVE-2021-38163 - SAP NetWeaver AS Java Desynchronization Vulnerability Description CVE-2021-38163 is a security vulnerability in SAP NetWeaver Application Server AS Java that allows an authenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution RCE...

CVE-2024-31114

CVE-2024-31114 - WordPress Shortcode Addons RCE Exploit Shortcode Addons = 3.2.5 – Authenticated Admin+ Arbitrary File Upload CVE ID: CVE-2024-31114 CVSS Score: 9.1 Critical 🛠️ Vulnerability Description The Shortcode Addons – with Visual Composer, Divi, Beaver Builder, and Elementor Extension...

CVE-2025-57833

CVE-2025-57833: ثغرة حقن SQL في Django يُوضّح هذا المستودع ويشرح CVE-2025-57833، وهي ثغرة حقن SQL خطيرة في ORM الخاص بـ Django تُؤثر على الإصدارات 4.2 قبل 4.2.24، و5.1 قبل 5.1.12، و5.2 قبل 5.2.6. 🚨 نظرة عامة على الثغرة نقاط CVSS : 9.8 حرجة التأثير : حقن SQL يؤدي إلى تنفيذ تعليمات برمجية عن بُعد R...