CVE-2014-6271-IPFire

CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire =2.15 ShellShock RCE Based on the Metasploit module for the same exploit EDB ID: 34839 Exploit is automatic. See ./CVE-2014-6271.py --help for a full range of switches Warning: The code in this repository may be used for academic/ethic...

CVE-2026-41089-Netlogon

🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Официальный модуль проверки безопасности для AI Security Tool Ecosystem 🌐 Демо-версия • 📚 Сайт проекта • 💬 Чат сообщества Навигация по сайту: Главная • Обновления • Загрузки • Модули 🧠 Conceptual Overview Я публикую подробны...

infected-drones

Infected Drones Drone-to-Ground Control Station attack vectors, vulnerabilities & exploits Drone fleets today are one operator flying dozens or hundreds of drones from a single ground station. This makes the ground control station a valuable target for adversaries. It is where the pilot is usuall...

CVE-2026-7654

CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Remote Code Execution Description The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated...

freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Summary FreePBX is the open-source web GUI for Asterisk PBX, widely deployed in enterprise telephony environments. The Endpoint Manager module exposes an AJAX handler at /admin/ajax.php that accepts a brand parameter a...

CVE-2023-38831-Exploit

CVE-2023-38831 WinRAR Exploit Generator Created by: technicalcorp This project contains a Python script that exploits CVE-2023-38831 , a vulnerability in WinRAR versions prior to 6.23. The exploit generates a malicious RAR archive that triggers the execution of arbitrary code when the victim open...

-CVE-2026-7465

-CVE-2026-7465 CVE-2026-7465 Spectra Gutenberg Blocks Authenticated RCE Exploit...

CVE-2019-7609

CVE-2019-7609 Exploit de Kibana para CVE-2019-7609 en python Este exploit puede darte RCE NOTA:- ESTA ES LA VERSIÓN MODIFICADA Ayuda Escuchando en el puerto 4242 Ejecutando el exploit Acceso inicial...

CVE-2025-32433-Exploit-edited

Exploit CVE-2025-32433 Compatible con Windows Ejecución Remota de Código No Autenticada en SSH de Erlang/OTP Descripción Este repositorio contiene un exploit para CVE-2025-32433, una vulnerabilidad crítica de ejecución remota de código no autenticada en el servidor SSH de Erlang/OTP...

CVE-2026-47670

CVE-2026-47670 Authenticated Remote Code Execution via loadReader functionName code injection in DbGate DbGate is an open-source, cross-platform database management tool designed for developers and database administrators who need to work with multiple database systems simultaneously. It provides...

next88

next88 - React Server Components RCE Scanner High-performance Go implementation for detecting React Server Components RCE vulnerabilities CVE-2025-55182 & CVE-2025-66478. Features 🚀 High Performance : Compiled Go binary with goroutine-based concurrency 🔍 Multiple Detection Methods : Safe...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Proof of concept Writeup: https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ The python script abuses the upload function that is availible unauthenticated at /admin/files-upload/ The script locally creates a bin folder and a file named...

Rasa-cve-exp

Rasa-cve-exp CVE-2021-42556 server-1.py Ejecútalo directamente root@kitploit: python server-1.py Carga arbitraria de archivos root@kitploit: PUT /model "modelserver":"url":"http://192.168.244.128:5000/stage1","waittimebetweenpulls":0 El resultado es el siguiente: CVE-2021-41127 server-1.py El...

CVE-2026-48907

CVE-2026-48907 — RCE no autenticado en Joomla Content Editor JCE ≤ 2.9.99.4 Exploit de prueba de concepto para CVE-2026-48907 — una vulnerabilidad de ejecución remota de código RCE CVSS 10.0 previa a la autenticación en la extensión Joomla Content Editor JCE. Investigación del Grayxploit Security...

CVE-2025-10230

CVE-2025-10230: Samba Critical RCE CVSS 10.0 Vulnerability Summary CVE-2025-10230 is a critical remote code execution RCE vulnerability that remained hidden in the Samba codebase for 13 years. The flaw resides in the handling of WINS Windows Internet Name Service registration packets. When...

CVE-2024-36401-poc

CVE-2024-36401 — GeoServer OGC XPath Injection RCE Unauthenticated Remote Code Execution exploit for GeoServer via OGC filter valueReference parameter injection XPath/JXPath evaluation. Disclaimer: This tool is intended for authorized penetration testing and security research only. Do not use...

CVE-2026-55200

Security Report: CVE-2026-55200 📝 General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ⚡...

CVE-2026-38526

CVE-2026-38526 - Krayin CRM RCE Descripción Script PoC para vulnerabilidad crítica en Krayin CRM v2.2.x que permite RCE autenticado mediante carga de archivos sin restricciones. Uso root@kitploit: Web shell python3 exploit.py -u http://target.com -e [email protected] -p password123 Reverse...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: now lets do it...