CVE-2020-7115

CVE-2020-7115 Create your malicious engine in seconds buildengine.sh Simple script to generate a malicious engine ready to be used in openssl argument injection scenarios. How to use? It's very simple, just modify the engine.c file with the command of your choice: root@kitploit: include...

CVE-2019-12185

CVE-2019-12185 eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be...

CVE-2025-50286

Grav CMS v1.7.48 / Admin Plugin v1.10.48 - Authenticated RCE via Plugin Upload CVE-2025-50286 Grav CMS v1.7.48 with Admin Plugin v1.10.48 is vulnerable to Remote Code Execution RCE via the "Direct Install" plugin upload feature, allowing authenticated administrators to execute arbitrary PHP code ...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

CVE-2024-25600

TG Join Us https://t.me/WanLiChangChengWanLiChang 加入我们定时查收各类漏洞 EXP POC CVE-2024-25600 Exploit WordPress插件Bricks Builder存在RCE漏洞CVE-2024-25600 WordPress插件Bricks Builder存在RCE漏洞CVE-2024-25600 EXP利用脚本 多POC混合利用 EXP脚本 FOFA body="/wp-content/themes/bricks/" EXP使用方法 26行修改读取的 文件; 34行修改 传马命令; 128行修改 线程;...

CVE-2025-27590

CVE-2025-27590 - PoC Exploit Command Injection via Multipart Form Upload 📌 Description This is a Proof-of-Concept PoC exploit for CVE-2025-27590 , a command injection vulnerability affecting web applications that process multipart file uploads without proper sanitization. The vulnerability allows...

Node.js-CVE-2024-39943

Vulnerabilidad de ejecución de comandos en HFS basado en Node.js CVE-2024-39943 Escuela White Hat 3ª promoción – 노정민 @JenmrR Resumen En el entorno del servidor HFS basado en Node.js, existe una vulnerabilidad que ejecuta el contenido de los archivos subidos mediante childprocess.execSync. Un...

VcenterKiller

VcenterKiller -1. Atención Compañeros que construyen un entorno de vulnerabilidad localmente, al usar vckiller para verificar log4j, generalmente fallará, porque en el entorno de Vmware con modo NAT, la tarjeta de red de salida en el módulo de verificación se determina como 127.0.0.1, por lo que ...

CVE-2024-53677-Analysis

CVE-2024-53677 Analysis This repository contains documentation and lab artifacts prepared for analyzing CVE-2024-53677 in Apache Struts. Overview CVE-2024-53677 is a vulnerability in Apache Struts file upload handling. The issue occurs when filename-related metadata from the legacy...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

CVE-2025-52078

🚨 CVE-2025-52078 - Unauthenticated Arbitrary File Upload - Writebot SaaS React Template This repository contains a proof-of-concept exploit for an Unauthenticated Arbitrary File Upload vulnerability found in the Writebot – AI Content Generator SaaS React Template. 🧠 Product Page: ThemeForest –...

CVE-2025-46157

CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Ejecución Remota de Código y Escalada de Privilegios Resumen Se descubrió una vulnerabilidad crítica en Timetrax V1 2025 que permite a usuarios autenticados eludir las restricciones de subida de archivos y lograr ejecución remota de código RCE. El...

CVE-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution Exploit CVE-2023-4220 Overview This repository contains a Bash script that exploits an unauthenticated remote code execution RCE vulnerability in Chamilo LMS via arbitrary file write. The vulnerability is identified as CVE-2023-4220. This exploit...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 文件上传漏洞分析 漏洞位置 漏洞位置：ht-contactform/admin/Includes/Services/FileManager.php 关键函数：tempfileupload 1. 主要漏洞点：tempfileupload 函数 root@kitploit: 63行 public function tempfileupload$file $destination = "$this-dir/temp";...

spring4shell-CVE-2022-22965

简单的Spring4Shell POC 检查端点是否易受攻击 python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check 利用易受攻击的端点 python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit 在上传的webshell上执行命令 python spring4shell.py -u...

CVE-2025-8889

Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arbitrary File Upload to RCE Date: 2025-07-23 Exploit Author: Muhammed Çelik Vendor Homepage: https://wordpress.com/plugins/compress-then-upload Software Link: https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

CVE-2025-12399

Alex Reservations: Smart Restaurant Booking = 2.2.3 - Authenticated Admin+ Arbitrary File Upload The WordPress Alex Reservations plugin versions 2.2.3 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress administrators to upload malicious PHP files to the...

CVE-2025-6002

Exploit for CVE-2025-6002 This script exploits the authenticated arbitrary file upload vulnerability in VirtueMart 4.4.10 CVE-2025-6002, which is described in this blog post: https://blog.blacklanternsecurity.com/p/doomla-zero-days This script logs in to VirtueMart with the given credentials,...

CVE-2024-24590-ClearML-RCE-CMD-POC

ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...