521172 matches found
CVE-2022-25581
CVE-2022-25581 Can't find it anywhere on the web, leaving a backup, Python exploit script , used to automate the following steps: ✅ Script Functionality Objectives 1. Log in to the backend obtain csrf and token 2. Construct a malicious request packet to upload a compressed archive containing a...
CVE-2019-7609
CVE-2019-7609 docker lab setup for kibana-7609 Reference : https://github.com/mpgn/CVE-2019-7609 root@kitploit: Open Kibana Past one of the following payload into the Timelion visualizer Click run On the left panel click on Canvas Your reverse shell should pop ! : payload by @securityMB...
CVE-2022-22965_Spring_Core_RCE
Spring-Core-RCE Spring Framework Remote Command Execution Vulnerability CVE-2022-22965 Spring-Core-RCE is comparable to the Apache Log4j2 nuclear-level vulnerability exp for one-click RCE exploitation Overview Recently, a remote command execution vulnerability regarding Spring Core was mentioned ...
cve-2019-9193
CVE-2019-9193 • CVE-2019-9193 Vulnerability PostgreSQL has a vulnerability that allows arbitrary code execution within the DB's operating system via the “COPY TO / FROM PROGRAM” feature. The attack vector involves users who are “SuperUser” or belong to the “pgexecuteserverprogram” group...
pulse-secure-vpn-mitm-research
pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process. Alyssa Herrera, Justin Wagner, and Mimir, and...
pulse-gosecure-rce-poc
pulse-gosecure-rce root@kitploit: /\ \ /\ \ /\ \ /\ \ /\ \ /::\ \ /::\ /::\ /::\ \ /::\ \ /::::\ \ /:::/ / /:::/ / /::::\ \ /::::\ \ /::::::\ \ /:::/ / /:::/ / /::::::\ \ /::::::\ \ /:::/:::\ \ /:::/ / /:::/ / /:::/:::\ \ /:::/:::\ \ /:::/:::\ \ /:::/ / /:::/ / /:::/:::\ \ /:::/:::\ ...
CVE-2023-46404
CVE-2023-46404 PCRS is a webapp for online programming exercises developed at the University of Toronto. See Bitbucket repository: https://bitbucket.org/utmandrew/pcrs/src/3.11/ Summary PCRS “Questions” page with code submission and “Code editor” page are vulnerable to remote code execution RCE b...
HG532d-RCE-Exploit
HG532d RCE Exploit Overview A Remote Code Execution RCE exploit based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com to work on Huawei HG532d Home Gateway Routers. Description This RCE exploit is based on CVE-2017-17215 which exploits vulnerabilities in the UPn...
CVE-2024-4577
This is POC of CVE 2024-4577 This exploit allows attacker to perform RCE in PHP Versions such as PHP 8.3 8.3.8 PHP 8.2 8.2.20 PHP 8.1 8.1.29 Arguments you can check from code! To read more about this particular exploit check nist.gov...
CVE-2020-27955-LFS-main
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
CVE-2023-24489-poc
CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It needs a list of target.txt full of the targets you want to test in this format: https://example1.com https://example2.com https://example3.com The file must be within the same dir where the bash script is executed. Please use with caution !...
cve-2023-2523-and-cve-2023-2648
cve-2023-2523 Note: The script uploads a phpinfo file Usage: Results are automatically saved to result.txt Image Manual POC: root@kitploit: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1...
CVE-2026-87083
A flaw was found in tile-ai tilelang. This vulnerability, located in the Kernel Cache component's KernelCache.loadkernelfromdisk function, allows a remote attacker to perform deserialization. This could lead to various impacts, such as arbitrary code execution or information disclosure, by...
CVE-2026-87430
A flaw was found in WebRTC, a real-time communication component, within Google Chrome. A remote attacker could exploit this buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the...
CVE-2025-52136
CVE-2025-52136 root@kitploit: https://github.com/ricardojoserf/emqx-RCE The original exploitation method uploads an EMQX plugin and adds Erlang os module calls in the plugin template code to execute system commands for RCE. In an outbound network environment, curl is available by default, so you...
CVE-2022-24934
CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...
CVE-2023-40031
CVE-2023-40031 notepad++堆缓冲区溢出漏洞CVE-2023-40031 分析与复现 漏洞概述 Notepad++ 是一款知名的开源代码编辑器，运行系统为Windows，支持多种编程语言。近日，安全研究人员针对 Notepad++进行检查，发现了不少安全漏洞。其中评分为 7.8 分（CVSS3，总分10分）的堆缓冲区溢出漏洞CVE-2023-40031，属于高危漏洞。该漏洞位于Utf816Read::convert函数中，进行UTF-16 到 UTF-8 转换时，错误计算转换后的UTF-8堆缓冲区的大小，导致该缓冲区之外的内存空间被覆盖，可能导致任意代码执行。 影响范...
CVE-2026-87021
Tanium Comply is affected by an unauthorized code execution vulnerability. The CVSS v3.1 score is 7.2 (HIGH) , with a network attack vector, low complexity, and high privileges required , resulting in high impact on confidentiality, integrity, and availability. No user interaction is needed. Tani...
