519237 matches found
CVE-2024-6387
่ฝฌ่ฝฝๅๆ CVE-2024-6387 - PoC ๐ Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's...
CVE-2019-0708-poc
CVE-2019-0708-poc CVE-2019-0708 Remote Code Execution Vulnerability Batch Detection 3389hosts is a list of IP addresses to be detected, one per line pool = ThreadPool10 is a custom scanning thread count Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be detecte...
CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE
CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...
CVE-2020-5902-fofa-scan
CVE-2020-5902-fofa-scan Introducciรณn Script de escaneo fofa para la vulnerabilidad de ejecuciรณn remota de cรณdigo en F5 BIG-IP CVE-2020-5902 Requisitos de explotaciรณn Membresรญa de fofa, rellenar el valor de fofaproarssession. Modificar el valor de keyword en la lรญnea 12 por su cuenta. Modificar el...
CVE-2023-38408
OpenSSH Vulnerability - CVE-2023-38408 ๐ Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...
React-2-Shell
Esta es una herramienta de explotaciรณn de seguridad dirigida a CVE-2025-55182. Explota una vulnerabilidad de ejecuciรณn remota de cรณdigo RCE en React Server Components. ๐ฅ Antecedentes de CVE-2025-55182 CVE-2025-55182 tambiรฉn conocido ampliamente como โReact2Shellโ es una vulnerabilidad crรญtica de...
CVE-2024-4577
CVE-2024-4577 - PHP CGI Argument Injection RCE Summary CVE-2024-4577 is a critical PHP CGI argument injection vulnerability that affects Windows systems running PHP in CGI mode. This flaw allows remote attackers to inject arguments into PHP's command line via specially crafted URLs, leading to...
SHELL-POC-CVE-2022-46169
SHELL-POC-CVE-2022-46169 A bash proof of concept of the CVE-2022-46169 sendind a revserse shell payload. To make a vulnerable environement on your own, visit this repo : https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application. Usage : root@kitploit: ./poc.sh -i -p -u...
CVE-2025-49113-Roundcube-RCE-PHP
CVE-2025-49113-Roundcube-RCE-PHP Versiones de Roundcube Webmail 1.5.0 a 1.6.10 Este es un exploit reescrito para funcionar con PHP. Uso root@kitploit: php CVE-2025-49113.php...
ctf-cve-2024-4577
CVE-2024-4577 CTF Challenge Overview This CTF challenge demonstrates CVE-2024-4577, a critical PHP CGI argument injection vulnerability affecting PHP versions 8.1.x 8.1.21, 8.2.x 8.2.8, and 8.3.x 8.3.1. Vulnerability Details CVE-2024-4577 is a PHP CGI argument injection vulnerability that occurs...
CVE-2022-22947
Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...
CVE-2024-23742
CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...
CVE-2023-4220-RCE
CVE-2023-4220-RCE Resumen Aviso de Starlabs Producto afectado: Chamilo , -p --port REMOTE PORT -c --comand Banderas para reverse shell -lh/--localhost: IP del atacante -lp/--localtcat listener port...
CVE-2024-38063
CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Research Comprehensive research to save you time, energy, sanity, & understanding. I want to start this off by saying that this specific CVE is like many in that due to its high severity score, it has gained an enormous amount...
FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-
FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- The FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 vulnerability is a security flaw discovered in FreeRDP, an open-source program used for implementing the Remote Desktop Protocol RDP This vulnerability arises from input processing weaknesses, allowing an...
ZimbraExploit
ZimbraExploit K8Cscan calls Zimbra8.8.11 Remote Code Execution Vulnerability GetShell https://www.cnblogs.com/k8gege/p/10822908.html CVE-2019-9621 Zimbra8.8.11 XXE GetShell Exploit...
CVE-2021-26084
CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection Install requirements root@kitploit: pip3 install -r requirements.txt Run exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py...
CVE-2017-5638-POC
CVE-2017-5638-POC Vulnerable server setup and proof of concept of CVE-2017-5638 remote code execution vulnerability in an Apache component Server The vulnerable server runs in a docker container, the image can be created using the Dockerfile, running this in the same folder of it: root@kitploit:...
VulnerableSpringDataRest
Vulnerable Spring DataRest App This is an intentionally Spring Data REST Application to test and demostrate the CVE-2017-8046 vulnerability and the challenges of testing Command Injection and Remote Code Execution via REST apis It has support for Swagger UI to use with tools where Swagger...
CVE-2015-3224
Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. โ ๏ธ Disclaimer This script is...