CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

CVE-2026-83549 is a post-authentication OS Command Injection (CWE-78) in the SonicWall SMA1000 Appliance Management Console (AMC) , scored CVSS 7.8 (High) with a local attack vector. In specific conditions, a remote authenticated attacker with administrator privileges can execute arbitrary OS com...

CVE-2026-84374

Laravel Excel (Maatwebsite) versions 3.1.8 through 3.1.70 contain a path-traversal flaw in Maatwebsite\Excel\Files\Disk::copy() (src/Files/Disk.php). The method resolves a caller-controlled $destination passed via Excel::store(), $export->store(), or storeExcel() against the process working di...

CVE-2022-44877-RCE

此存储库没有 README。...

CVE-2018-16509

CVE-2018-16509 Docker Playground "An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction."...

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: root@kitploit: python3 -m pip install -r requirements.txt Usage Single : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"'...

CVE-2020-9496

CVE-2020-9496 Las solicitudes XML-RPC son vulnerables a deserialización insegura y problemas de Cross-Site Scripting en Apache OFBiz 17.12.03 Instalar requisitos root@kitploit: $ pip install -r requirements.txt $ wget...

CVE-2023-32560

CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC 参照: https://www.tenable.com/security/research/tra-2023-27...

CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE IngressNightmare root@kitploit: ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 のスタックベースオーバーフローを利用したリモートコード実行（実行フローのハイジャックおよび複数レジスタ操作の悪用）; CVE は以下の通り: CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 N1 ～ N7 としてマーク済み rop.py アクセス可能なマシン上で tftp をホストしていることを確認してください; args.attackerhost で指定します; プリコンパイル済みローダー rs が...

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Spring Cloud Function Vulnerability CVE-2022-22963 RCE This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function =3.1.6 for 3.1.x and =3.2.2 for 3.2.x Combination of multiple POCs online Author: Randall Banner Date: 17/04/23 Description: Scri...

cve-2024-10914-port

CVE-2024-10914 ported to rust and python because why not what is this cve-2024-10914 is a recently discovered 9.8 critical score vulnerability that affects some dlink routers. because those routers reached their eol support, dlink refuses to patch this vulnerability because "stop being poor and...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack These are just some scripts which you can use to detect and exploit the Apache Struts Vulnerability CVE-2017-5638 There is a MassScanner and Exploiter, You can use scanner to Mass Scan a list of URLs and then exploit them by Exploiter. The Exploiter will run arbitrary...

apache2.4.49VulnerableLabSetup

apache2.4.49VulnerableLabSetup CVE-2021-41773，Apache HTTP 服务器 2.4.49 容易受到路径遍历和远程代码执行攻击。该仓库用于模拟该漏洞。...

exploit-CVE-2016-10034

PHPMailer 就是这样，你拥有了一个 shell。还有另一个利用程序，演示了另一种用例。 root@kitploit: ./deface.sh localhost:808...

CVE-2025-5781

FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...

CVE-2022-29464

CVE-2022-29464 A preauth arbitrary file upload that leads to RCE in WSO2 Summary of the CVE CVE-2022-29464 is a RCE vulnerability for WSO2 discovered by Orange Tsai. A unauthenticated arbitrary file upload allows an attacker to execute code by uploading a malicious JSP file. Affected Versions WSO...

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...

CVE-2019-12840.py

CVE-2019-12840.py POC（伪造Shell）： CVE-2019-12840（认证RCE - Webmin软件包更新）...

CVE-2014-4377

Corrupción de Memoria en CoreGraphics - CVE-2014-4377 La biblioteca Apple CoreGraphics no valida correctamente la entrada al analizar la especificación del espacio de color de un XObject PDF, lo que provoca una condición de desbordamiento de montón. Una pequeña asignación de memoria en el montón...