271571 matches found
CVE-2019-0604_sharepoint_CVE
CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
mybb-CVE-2022-24734
mybb-CVE-2022-24734 MyBB 1.8.29 - 远程代码执行 root@kitploit: git clone https://github.com/lavclash75/mybb-CVE-2022-24734.git cd "mybb-CVE-2022-24734" docker-compose down docker system prune -a docker rm -f $docker ps -a -q docker volume rm $docker volume ls -q docker-compose up -d...
mi-laboratorio-log4shell
🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An automated, single-command security research laboratory designed to demonstrate and audit the Log4Shell CVE-2021-44228 Remote Code Execution RCE vulnerability. This project consolidates all necessary components vulnerable application, malicio...
CVE-2026-2586
Authenticated GlassFish EL Injection RCE CVE-2026-2586 An Expression Language Injection vulnerability in the GlassFish Administration Console allows an authenticated user to inject malicious EL expressions into parameters processed by the administrative web interface. Successful exploitation may...
Codify-TJNULL-OSCP-
Hack The Box — Writeup de Codify Guía completa de pruebas de penetración y writeup para la máquina Codify en Hack The Box. 📌 Información de la Máquina Campo| Valor ---|--- Nombre| Codify SO| Linux Dificultad| Fácil Conceptos Clave| vm2 RCE CVE-2023-30547, Enumeración de BD SQLite, Cracking de...
React2Shell_Exploit
React2ShellExploit CVE-2025-55182 I created simple react2shell CVE-2025-55182 python exploit USAGE 1. Save the script: Save the code above as exploit.py. 2. Update Hosts: Ensure reactor.htb resolves to the target IP in your /etc/hosts file. echo " reactor.htb" | sudo tee -a /etc/hosts 3. Start...
CVE-2026-39023
CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 last version - not patched Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used ...
CVE-2026-22356
CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE Warning: This tool should only be used in authorized test environments. The user is solely responsible for illegal use. 📥 Requirements root@kitploit: pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd...
cve-2022-36804
CVE-2022-36804 Bitbucket PoC Este repositorio contiene un script de explotación en Python para la vulnerabilidad CVE-2022-36804 de Atlassian Bitbucket Server/Data Center. El problema es una falla de inyección de comandos en el flujo de archivado de Git, donde los parámetros prefix manipulados...
UniBLEed
UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...
Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-
Explotación de Vulnerabilidad BlueKeep CVE-2019-0708 en Entorno Controlado Proyecto académico enfocado en el análisis, ejecución y resolución de problemas durante la explotación de la vulnerabilidad BlueKeep CVE-2019-0708 en el servicio RDP de Windows Server 2008 R2, desarrollado para la asignatu...
mgo3-rce
MGO3 RCE Este repositorio contiene información sobre CVE-2026-19874. documentación demo en vídeo Cronología 2026-06-26: se descubre la vulnerabilidad 2026-06-26: primer contacto con Konami 2026-07-01: se notifica la vulnerabilidad a Konami 2026-08-04: Konami parchea la vulnerabilidad...
cve-2022-41352-zimbra-rce
Este repositorio no tiene un README...
CVE-2020-9496
CVE-2020-9496 - RCE Debido a que las 2 solicitudes relacionadas con xmlrpc en webtools xmlrpc y ping no utilizan autenticación, son vulnerables a una deserialización insegura. Este problema fue reportado al equipo de seguridad por Alvaro Munoz [email protected] del equipo de GitHub Security...
POC-AIOWPM-CVE-2026-19949
CVE-2026-19949 — Prueba de concepto documentada y reproducible en Docker Inyección SQL de segundo orden no autenticada en All-in-One WP Migration and Backup WordPress que escala a filtrado de la ai1wmsecretkey y, con ella, a ejecución remota de código RCE. Lee esto en: English · Español...
CVE-2026-4253-Scanner
CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...
CVE-2023-43364-Searchor-RCE-Exploit
CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsafe eval usage in Searchor 2.4.2 Overview This project demonstrates exploitation of CVE-2023-43364 , a Remote Code Execution RCE vulnerability affecting the Python package Searchor 2.4.2. The issue is caused by unsafe usag...
