CVE-2025-51820

CVE-2025-51820 A critical Remote Code Execution RCE vulnerability CVE-2025-51820 has been discovered in the Shopping Portal v1.0. 🚨 Remote Code Execution in Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Introduction In today’s digital world, Remote Code Execution RCE remains one of the mos...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: root@kitploit: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python...

Project-Exploitation-of-Webmin-Authentication-Vulnerability

Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...

CVE-2026-82545 itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

EUVD-2026-68228

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

rConfig_rce

rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...

CVE-2026-82545

CVE-2026-82545 is a SQL injection vulnerability in itsourcecode Sales and Inventory System 1.0 , located in an unknown function of the file /pages/sup_searchfrm.php . The flaw is triggered by manipulating the ID argument, and can be exploited remotely with low privileges (CVSS 3.1: 6.3 MEDIUM , C...

CVE-2025-50460

CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

CVE-2016-010033-010045

CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 को python3 में आयात किया गया आरंभ करना ये निर्देश आपको विकास और परीक्षण उद्देश्यों के लिए आपकी स्थानीय मशीन पर प्रोजेक्ट की एक प्रति प्राप्त करने और चलाने में मदद करेंगे। लाइव सिस्टम पर प्रोजेक्ट को तैनात करने के तरीके के बारे में नोट्स के लि...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...

CVE-2025-52385

CVE-2025-52385 البرنامج : Studio 3T v.2025.1.0 تقرير الثغرة : تنفيذ أوامر عن بُعد في Studio 3T نظرة عامة ثغرة حرجة في Studio 3T الإصدار 2025.1.0 والأقدم تتيح لمهاجم عن بُعد تنفيذ تعليمات برمجية عشوائية عبر حمولة مصممة بعناية تستغل وحدة childprocess في مكوّن IntelliShell. التفاصيل نوع الثغرة: تنفي...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax root@kitploit: python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address...

PoC-CVE-2015-10141-Xdebug

PoC-CVE-2015-10141 Custom Python exploit for Xdebug ≤ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...

CVE-2024-42327_Zabbix_SQLi

🛡️ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. ⚠️ DISCLAIMER: This...

Adobe-ColdFusion-8-RCE-CVE-2009-2265

Adobe ColdFusion 8 - Remote Command Execution RCE Exploit Overview This exploit targets a known vulnerability in Adobe ColdFusion 8 CVE-2009-2265. It enables remote command execution RCE by uploading a malicious JSP payload that establishes a reverse shell connection. Exploit Details CVE :...

zoneminder_CVE-2023-26035

शोषण - ZoneMinder CVE-2023-26035 यह ZoneMinder स्नैपशॉट्स को प्रभावित करने वाला एक अप्रमाणित दूरस्थ कोड निष्पादन RCE है। यह CVE-2023-26035 के लिए एक शोषण है। प्रभावित संस्करण ZoneMinder 1.36.33 और ZoneMinder 1.37.33। उपयोग जाँचें कि लक्ष्य असुरक्षित है या नहीं: root@kitploit: python3 zoneminder.p...

CVE-2020-5902

CVE-2020-5902 CVE-2020-5902 F5 BIG-IP उपकरणों की जांच करने के लिए पायथन स्क्रिप्ट। उपयोग root@kitploit: python3 CVE-2020-5902.py -i आउटपुट root@kitploit: - Python script to check CVE-2020-5902 F5 BIG-IP devices. | coded by Abdullah AlZahrani ! Your target: 127.0.0.1 I /etc/passwd readable PoC...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - استغلال تنفيذ التعليمات البرمجية عن بُعد v2 استغلال عامل لـ Open Web Analytics 1.7.3 - RCE محسّن مع php reverse shell الخاص بـ pentestmonkey، تم إصلاح مشكلة عدم القدرة على العثور على المستخدم في ذاكرة التخزين المؤقت. يمكن العثور على الاستغلال الأصلي هنا...