Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Proof-of-Concept Overview This repository contains a Python script that demonstrates a proof-of-concept PoC exploit for CVE-2023-38831. This exploit leverages a vulnerability in specific file-processing mechanisms to execute a reverse shell payload through a malicious RAR...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Exécution de code à distance Authentifié CVE-2025-5196 Wing FTP Server fournit une console de script Lua administrative accessible via son interface web. Les administrateurs authentifiés peuvent exécuter du code Lua arbitraire avec un sandboxing insuffisant. Version affect...

CVE-2020-29607

CVE-2020-29607-Exploit Exploit Title: Pluck CMS 4.7.13 - File Upload Remote Code Execution Authenticated CVE description: A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality,...

CVE-2020-14882

CVE-2020–14882 Weblogic Unauthorized bypass RCE bypass patch with CVE-2020–14882 private static final String IllegalUrl = new String";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", ""; list root@kitploit: %252E%252E %2E%2E .. %3E %3C ; lower root@kitploit: "%252E%252E%252F".lower '%252e%252e%252f...

CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105 API root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Output: Attack root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Output: Logs: Reference: https://vulners.com/cve/CVE-2021-45...

FreePBX-CVE-2025-57819-CVE-2025-61678

FreePBX-CVE-2025-57819-CVE-2025-61678 Combine CVE-2025-57819 injection SQL par requête empilée et CVE-2025-61678 téléchargement de fichier authentifié dans FreePBX Endpoint Manager pour réaliser une exécution de code à distance RCE. Pour usage éducatif uniquement. Références :...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer détermine où un serveur de noms de domaine DNS donné obtient ses informations pour un nom d'hôte donné, et suit la chaîne de serveurs DNS jusqu'à la réponse faisant autorité. Problème Un débordement de tampon basé sur la pile dans dnstracer jusqu'à la version...

CVE-2022-24638

AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026 THIS VERSION IS FIXED TO PREVENT FALSE NEGATIVES CVE-2022-24637 Exploit for the Unauthenticated RCE in Open Web Analytics OWA 1.7.4. This work is based on https://devel0pment.de/?p=2494. DISCLAIMER: This script is made to audit the...

CVE-2019-11580

CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE Usage: python CVE-2019-11580.py http://xx.xx.xx.xx/ Crowd-2.11.0 VulnVersion Donwload https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz Powered by Atlassian Crowd Version: 2.11.0 Build:725 -...

CVE-2021-32305-websvn-2.6.0

CVE-2021-3205-websvn-2.6.0 Это эксплойт для CVE-2021-3205 — веб-уязвимости, позволяющей внедрение команд в пути search.php. Данный эксплойт позволяет выполнять команды. Требования optparse, signal, requests Использование root@kitploit: ❯ python3 CVE-2021-3205.py --url http://10.0.2.168/websvn/...

CVE-2025-47812

CVE-2025-47812 Improper input validation led to Remote Code Execution to full system compromise 📘 Introduction: Julien Ahrens from RCE Security discovered a critical security vulnerability impacting WingFTP. Tracked as CVE-2025-47812, the vulnerability has a CVSS score of 10. Successful...

CVE-2021-22005_PoC

CVE-2021-22005PoC CVE-2021-22005PoC getshell: https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e verify: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923WEBVmwarevCenterServerFIleUploadCVE-2021-20050.py...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock Exploitation Script 🎯💻🔍 This Python script exploits the Shellshock vulnerability CVE-2014-6271 to execute commands remotely or establish a reverse shell on a vulnerable target. 🛠️⚠️ ⚠ Disclaimer 🚨❗ This script is intended for educational and authorized...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Fixed Version Description This is an exploit for the Apache HTTP Server 2.4.49 vulnerability identified as CVE-2021-41773. The original version of the exploit published on Exploit-DB contained syntax and execution...

CVE-2017-3078

CVE-2017-3078 Description On CVE-2017-3078 Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. Description 2 : Adobe...

CVE-2023-33733

CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl;dr This write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an...

CVE-2024-29847

CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-29847 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/ivanti-epm-CVE-2024-29847-deserialization-RCE/ Usage...

CVE-2025-8110

Exploit RCE Gogs CVE-2025-8110 Un Proof of Concept PoC pour CVE-2025-8110 , une vulnérabilité critique dans Gogs qui permet l'exécution de code à distance RCE via la manipulation de .git/config en utilisant des contournements de liens symboliques et l'injection de sshCommand. 📖 Vue d'ensemble Cet...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...