CVE-2026-76658

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-73716

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73720

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73712

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to...

CVE-2026-73713

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker to achieve arbitrary code execution with root privileges on the underlying operating system of the affected system...

CVE-2026-72649

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

CVE-2026-45221

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...

CVE-2026-19766

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

CVE-2022-1329

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 リモートコード実行 root@kitploit: Ngày: 16 tháng 4 năm 2023 Khai thác Tác giả: Việt Hùng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://elementor.com/ Link phần mềm: https://wordpress.org/plugins/elementor/advanced/ kéo xuống chọn...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 自動シェルアップロード WordPress Royal Elementor 1.3.78 シェルアップロード Visit https://phankz.com...

go-get-rce

This repository does not have a README...

CVE-2024-56145-craftcms-rce

Before you run script again do fuser -k 6666/tcp Usage - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 Custom command can be used like python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i is your IP or your vps IP use that by doing ipconfig / ifconfig. Like - python3 poc.py -f...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - 远程代码执行 RCE 已验证 root@kitploit: 日期：2023年11月5日 利用作者：Việt HÙng https://github.com/phanthibichtram12 供应商主页：https://www.wpallimport.com/ 软件链接：https://wordpress.org/plugins/wp-all-import/advanced/ 向下滚动选择版本 版本：= 3.6.7 已测试：3.6.7 测试环境：WordPress 6.1 不依赖操作系统，因为此利用不提供载...

CVE-2025-49113

CVE-2025-49113 – Roundcube Remote Code Execution RCE PoC This repository contains a Proof-of-Concept PoC exploit for CVE-2025-49113 , a critical remote code execution vulnerability in Roundcube Webmail versions prior to 1.5.10 and 1.6.11. The vulnerability arises from insecure PHP object...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600 Drupal RCE Credits to: File| Drupal Ver| Source| Comment ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708| poc1-a2u.py| 8|...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Exploitation of Remote Code Execution Vulnerability CVE-2024-7954 Software Vulnerability Testing Project Submitted by: Shivansh Kuntal Overview This project demonstrates the exploitation of CVE-2024-7954 , a critical Remote Code Execution RCE vulnerability affecting SPIP CMS through its porteplum...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE 漏洞利用工具 作者：Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 本仓库包含针对 CVE-2024-51791 的概念验证（PoC）漏洞利用代码。该漏洞存在于易受攻击的 WordPress 表单插件中，属于未认证的任意文件上传漏洞，可导致远程命令执行（RCE）。 脚本功能 该脚本在无需认证的情况下，通过易受攻击的表单端点上传 PHP 载荷。随后枚举上传目录以定位载荷、检测目标操作系统，并提供交互式远程 Shell 以便执行命令。 用法...

CVE_2022_38181_Gazelle

FireTV 第3世代Cube 上で動作する CVE-2022-38181 のエクスプロイト これは、セキュリティ研究者 Man Yue Mo 氏の CVE202238181 用の Pixel 6 POC のフォークです。詳細な脆弱性解説は こちら をご覧ください。FireOS の32ビットユーザースペースに対応するための変更が加えられています。このPOCは、ARM Mali カーネルドライバのバグを悪用してカーネルコードの任意実行を実現し、SELinuxを無効化してrootを取得します。 ndk-21 の clang を使用してコンパイルするには以下のコマンドを使用しました：...

CVE-2016-16113-POC

Get RCE - Bludit CMS Exploit root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| An automated exploitation tool that combines CVE-2019-17240 Authentication Bypass and CVE-2019-16113 Arbitrary File Upload to achieve remote code...

CVE-2025-23968

AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o The AI Bud plugin exposes a REST API endpoint /wp-json/ai-buddy/v1/wp/attachments that allows uploading files to the WordPress media library. The endpoint’s file logic contains file renaming functionality that triggers after file...