1137561 matches found
cve-2020-0796
Identifying and Mitigating the CVE-2020โ0796 flaw in the fly CVE-2020โ0796, is pre-remote code execution vulnerability that resides in the Server Message Block 3.0 SMBv3 network communication protocol, which Microsoft will not address the issue as the part of the March 2020 Tuesday. Usage python3...
f5_rce_poc
Usage root@kitploit: python3 f5rce.py -u ๆๅฎ็ฎๆ URL -f ๆน้ๆฃๆตๆไปถ -c ๆง่กๅฝไปค -s/--ssrf ้่ฟssrf่ทๅพtokenๆง่กๅฝไปค The effect is as shown below: root@kitploit: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it ๐ Future Updates:...
PoC-CVE-2025-26529
PoC for CVE-2025-26529 โ Moodle XSS to RCE Exploit This is a Proof of Concept PoC demonstrating the SSRF to XSS โ XSS to RCE vulnerability chain in Moodle. Overview Iโve uploaded all the necessary files to demonstrate the full chain of exploitation: 1. SSRF to XSS 2. Grabbing the admin cookie 3...
CVE-2021-26295
CVE-2021-26295-POC Vulnerability verification for CVE-2021-26295 using DNSlog. Usage poc: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot generate the payload properly exp: python exp.py https://baidu.com then enter the command executio...
CVE-2020-1493
CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...
CVE-2020-17530
What's this This is a Simple test Project for S2-061 which can be used to analysis the detail of this vulnerability. How to use Step 1:Use IDEA import this project Step 2:setup tomcat Server Step 3:Use browser access...
CVE-2026-33017-Langflow-RCE
root@kitploit: โโโ โโโ โโโโโโโ โโโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโโโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโโโโ โโโโโโโโโโโ โโโโ โโโโโโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโโโโ โโโโโโโโโโโ โโโโโโโ...
CVE-2021-22204
CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg Revers...
CVE-2022-0543
CVE-2022-0543 CVE-2022-0543RCE,Redis Luaๆฒ็็ป่ฟ ๅฝไปคๆง่ก Usage python3 CVE-2022-0543.py...
CVE-2024-4879
CVE-2024-4879 Exploit & PoC - Nuclei Template CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticate...
CVE-2020-17530
S2-061 The scripts are written based on the struts2-059/061 vulnerability test environment from vulhub, and are not universally applicable. Feedback from experienced individuals is welcome. struts2-061-poc.py can execute simple system commands Usage: python struts2-061-poc.py http://ip:port comma...
CVE-2026-61410
Dell SCG 5.0 Appliance (versions prior to 5.36.00.16 ) and Dell SCG 5.0 Application (versions prior to 5.36.00.00 ) contain a Missing Authorization vulnerability. An unauthenticated remote attacker can execute commands on the target system by sending a specially crafted request to the application...
EUVD-2026-72364
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
CVE-2026-61410
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
CVE-2021-22911-RocketChat
CVE-2021-22911 โ Rocket.Chat 3.12.1 RCE Improvised Description Exploits a pre-auth NoSQL injection vulnerability in Rocket.Chat 3.12.1 to leak the admin's TOTP secret and password reset token, take over the admin account, and achieve RCE via a malicious webhook integration. Affected Version...
CVE-2021-2109
Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network...
threatDemos
๐จ Android Security Threat Demonstrations Repository A comprehensive collection of proof-of-concept Android security vulnerabilities and attack vectors This repository serves as an educational resource showcasing real-world Android security threats and their corresponding mitigation strategies. Ea...
CVE-2023-38408
OpenSSH Vulnerability - CVE-2023-38408 ๐ Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...
CVE-2026-61409
Dell Secure Connect Gateway (SCG) 5.0 Application, in versions prior to 5.36.00.00 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements). An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote cod...
EUVD-2026-72361
Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...