CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

cve-2019-3398

cve-2019-3398 Details A quick python proof of concept for CVE-2019-3398 confluence vulnerability written in python. Confluence version 6.12.3, 6.13.3, 6.14.2, and 6.15.1 are affected. The exploit requires working credentials. To use Edit the osusername and ospassword fields, and possibly the...

Automation-for-Juniper-cve-2023-36845

Automation for Juniper CVE:2023-36845 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of IP addresses, sends a request to each, and determines whether the system is vulnerable based on the response. Usage To use the script, run it fro...

EUVD-2026-77457

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

CVE-2026-77147 Apache Syncope: Groovy Sandbox escape for empty CommandArgs

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

CVE-2026-77147

CVE-2026-77147 is a code injection vulnerability in Apache Syncope 's Groovy security sandbox. An administrator with sufficient entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in the CommandArgs static implementation , bypassing the sandbox —...

CVE-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

EUVD-2026-77450

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

CVE-2026-90932

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in core-upgrade backup handling. The CoreUpgradeController and BackupService concatenate a user-supplied backup_file/filename value directly onto the backup directory path without normalisation or path-containment c...

CVE-2024-6387

CVE-2024-6387 a signal handler race condition in OpenSSH's server sshd Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe...

CVE-2024-38077

CVE-2024-38077 Here’s a possible GitHub description for CVE-2024-38077: CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service Overview: CVE-2024-38077 is a critical vulnerability in the Windows Remote Desktop Licensing Service, which allows remote attacke...

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — who put ptrs in my wasm Proof-of-concept exploit chain for CVE-2026-15718 , a missing-sync miscompilation in Mozilla SpiderMonkey's WebAssembly baseline compiler "JavaScript: WebAssembly" component. A single zero-trip array.fill yields a fakeobj primitive; the chain escalates to...

CVE-2022-21907

CVE-2022-21907 Description root@kitploit: POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by Malwareman at 2022-09-17. Detail root@kitploit: HTTP Protocol Stack Remote Code Execution Vulnerability. Similar to...

Apache-APISIX-CVE-2022-24112

Apache APISIX Remote Code Execution CVE-2022-24112 Exploit Summary An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key w...

CVE-2021-44168

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: root@kitploit: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -...

oieh-router-checker

OIEH Router Checker A Windows program that checks with a single click whether your router is affected by the Chinese backdoor ENDLESSDOORS No installation required · No administrator rights required · No external data transmission What Is This? In August 2026, security firm VulnCheck discovered a...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc A proof-of-concept exploiting an unauthenticated remote code execution via the admin panel's PHP console feature in MajorDomo Major Domestic Module. Vulnerability MajorDoMo's admin panel exposes a PHP evaluation console via /admin.php. Due to a missing exit after an...