React2Shell-Kingdom

React CVE-2025-55182 Vulnerability Demonstration Project ⚠️ SECURITY WARNING This project demonstrates a critical RCE vulnerability CVE-2025-55182 / React2Shell in React Server Components 19.1.1. FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY NEVER deploy to production or expose to untrusted...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Microsoft サポート診断ツールの脆弱性に関するガイダンス MSRC / msrc 著 / 2022年5月30日 2022年5月30日月、Microsoft は、Windows の Microsoft サポート診断ツール MSDT の脆弱性に関する CVE-2022-30190 を公開しました。 Word などの呼び出し元アプリケーションが URL プロトコルを使用して MSDT...

CVE-2025-55182-Test-Server

CVE-2025-55182-Test-Server Play with react2shell in a safe environment! Quick Start Clone the repo root@kitploit: git clone https://github.com/CharlesTheGreat77/CVE-2025-55182-Test-Server cd CVE-2025-55182-Test-Server Run the docker file root@kitploit: docker compose up --build -d PoC...

CVE-2019-16113-Dockerfile

Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...

RCE-Exploit-Bolt-3.7.0-CVE-2020-4040-4041

This repository does not have a README...

Elastix-2.2.0-CVE-2012-4869

Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...

cve-2017-7269

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: http://" in a PROPFIND request, as exploited in the wild ...

CVE-2024-25293

MJML Local Code Execution PoC A Proof-Of-Concept for CVE-2024-25293 vulnerability. mjml-app v3.0.4 & 3.1.0-beta was discovered to contain a remote code execution RCE In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python fi...

CVE-2023-46604

CVE-2023-46604 Set up docker-compose containing 2 images: the victim machine and the target machine according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Open an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen fo...

CVE-2024-21182

CVE-2024-21182 — Oracle WebLogic Server T3/IIOP JNDI Injection → RCE lab A self-contained, one-command Docker lab to reproduce and validate the Oracle WebLogic Server OpaqueReference JNDI-injection vulnerability family CVE-2024-21182, a patch bypass of CVE-2023-21839 and turn it into...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

ezviz_lan_rce

ezvizlanrce Este repositorio contiene las diapositivas y los vídeos de prueba de concepto de la charla SADProtocol goes to Hollywood , presentada en DEF CON 31 Hardware Hacking Village. También puedes encontrar la imagen de docker para compilar binarios que se ejecutan en la cámara y los exploits...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Exploit Canario para Parquet CVE-2025-30065 root@kitploit: -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / ...

CVE-2023-50164-HTB-strutted

CVE-2023-50164: A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution RCE. It is intended only for educational,...

CVE-2024-44902-env

CVE-2024-44902 - ThinkPHP Insecure Deserialization RCE Vulnerable environment for nuclei-templates validation. Vulnerability Details Field| Value ---|--- CVE ID| CVE-2024-44902 Severity| Critical CVSS 9.8 Product| ThinkPHP Affected Versions| 6.1.3 - 8.0.4 Type| Insecure Deserialization → RCE CWE|...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - Critical NGINX RCE CVSS 9.2 Classification Category: 0-Day / Remote Code Execution CVE: CVE-2026-42945 CVSS: 9.2 Critical Date Discovered: May 12, 2026 Date Patched: May 2026 F5 quarterly security release Source: GitHub DepthFirstDisclosures/Nginx-Rift Vulnerability Details A...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 - RCE sin autenticación previa en Confluence | Inyección OGNL Instalar requisitos root@kitploit: pip3 install -r requirements.txt Ejecutar el exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha Monitoring Cross-Tenant RCE via Cron API Authorization Bypass A lab environment for reproducing and detecting CVE-2026-46716 , a critical vulnerability in Nezha Monitoring where the POST /api/v1/cron endpoint lacks admin privilege checks, allowing RoleMember users to achiev...

CVE-2023-48849

CVE-2023-48849 Ruijie EG Series Routers firmware =EG3.01B11P216 allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering. root@kitploit: $ python3 poc.py 192.168.1.1 'id' uid=0root gid=0root $ python3 poc.py 192.168.1.1 'grep TARGET /etc/openwrtrelease'...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — Langflow Unauthenticated Remote Code Execution RCE Overview CVE ID: CVE-2026-33017 Affected Software: Langflow Vulnerable Versions: = 1.9.0 Severity: Critical Author: r3nsi15 Date: 2026 Description Langflow exposes a public flow build endpoint /api/v1/buildpublictmp/flowID/flow...