CVE-2024-2054

CVE-2024-2054 Artica-Proxy administrative web application insecure deserialization RCE An exploit proof of concept for ARTICA PROXY Administrative web application CVE-2024-2054 Blog Post More details here:...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Unrestricted Upload of File with Dangerous Type CVSS Score: 8.5 High 📋 Description This tool provides a Proof of Concept PoC for CVE-2025-56399 , a critical vulnerability in alexusmai/laravel-file-manager versions ≤ 3.3.1. The...

CVE-2024-48061

CVE-2024-48061 Langflow vulnerable to remote code execution CVE-2024-48061 poc Usage root@kitploit: python3 poc.py -i -p -l -lp Description This script exploits a vulnerable API endpoint at /api/v1/validate/code on the target web server. It first verifies the presence of the vulnerable path, then...

CVE-2022-1388

CVE-2022-1388 يتكون هذا المستودع من كود استغلال Python لثغرة CVE-2022-1388 RCE في F5 BIG-IP. الاستخدام: exploit.py -h -t TARGET -p PORT -c CMD --ssl الخيارات: -h, --help اعرض رسالة المساعدة هذه واخرج -t TARGET, --target TARGET حدد عنوان IP أو اسم النطاق للخادم المعرّض للثغرة -p PORT, --port PORT...

CVE-2024-4879

CVE-2024-4879 ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024–4879, CVE-2024–5217, and CVE-2024–5178, affec...

CVE-2017-5638-ApacheStruts2.3.5

CVE-2017-5638-ApacheStruts2.3.5 A exploit for CVE-2017-5638. This exploit works on versions 2.3.5-2.3.31 and 2.5 – 2.5.10 Requirements optparse, requests Usage This exploit can be used like this: root@kitploit: $ python3 CVE-2017-5638ApacheStruts.py -u...

CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR Labs c 2018 Details this proof of concept exploit targets Safari 11.0.3 13604.5.6 on macOS 10.13.3 17D47 versions only. compile the payload of your choice as a dylib with a constructor run python filetojsarray.py your.dylib payload.js...

CVE-2024-25600-Bricks-Builder-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2026-31816

CVE-2026-31816 - تجاوز المصادقة في Budibase إلى RCE CVE-2026-31816 هي ثغرة أمنية حرجة في تجاوز المصادقة والتفويض تؤثر على Budibase. توجد الثغرة في البرمجية الوسيطة للتفويض من جانب الخادم المسؤولة عن حماية نقاط نهاية API. تحاول Budibase تحديد نقاط نهاية webhook الشرعية باستخدام تعبير نمطي غير مثبّ...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679. FIRST: I AM NOT RESPONSIBLE FOR WHAT YOU DO WITH IT. SECOND: apt-get install parallel curl...

Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

The goal of this project was to conduct a security audit of a blog recently launched by Ackme Support Incorporated, identifying any critical vulnerabilities before the site goes public. The task involved finding a way to remotely execute code and gain access to the target system. Environment &...

Added-Pentest-Ground-to-vulnerable-websites-for-training

https://vulners.com/cve/CVE-2017-0089 يسمح Uniscribe في Microsoft Windows Vista SP2 وWindows Server 2008 SP2 وR2 SP1 وWindows 7 SP1 للمهاجمين عن بُعد بتنفيذ تعليمات برمجية عشوائية عبر موقع ويب مخصص، ويُعرف أيضًا باسم "Uniscribe Remote Code Execution Vulnerability." تختلف هذه الثغرة عن تلك الموصوف...

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

CVE-2023-50164Analysis-

CVE-2023-50164: Apache Struts Vulnerable Application A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution RCE...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 के लिए POC & लैब लैब सेटअप root@kitploit: $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC root@kitploit: RCE curl...

CVE-2023-0297

CVE-2023-0297 RCE في pyload قبل الإصدار 0.5.0b3.dev31. إخلاء مسؤولية: يؤدي هذا السكريبت إلى الوصول غير المصرح به أو التحكم في نظام عن بُعد؛ استخدمه فقط إذا كان لديك إذن صريح من مالك النظام قبل المتابعة...

varlib-cve-2025-66034

fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline...

CVE-2025-55182

CVE-2025-55182 — React2Shell Critical Remote Code Execution in React Server Components. Severity: CRITICAL | CVSS v3.1: 10.0 Maximum | Status: Actively Exploited What Is This? React2Shell is a critical security vulnerability in React Server Components RSC — a modern feature that lets React run...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview...

CVE-2024-22198_Checker

CVE-2024-22198 - تنفيذ أكواد عن بعد موثق في Nginx-ui الوصف هذه الأداة مصممة للتحقق عن بُعد من إصدار Nginx-ui لديك وإعلامك إذا كان عرضة للثغرة CVE-2024-22198. Nginx-UI هي واجهة ويب لإدارة إعدادات Nginx. وهي عرضة لتنفيذ أوامر تعسفية عن طريق إساءة استخدام إعدادات التهيئة. تعرض صفحة Home Preference...