CVE-2025-8714-POC

CVE-2025-8714-POC PoC de RCE en PostgreSQL — CVE-2025-8714 PoC de Ejecución Remota de Código en PostgreSQL — CVE-2025-8714 pgdump Reverse Shell Este repositorio presenta una prueba de concepto PoC para la vulnerabilidad crítica CVE-2025-8714 que afecta a versiones PostgreSQL anteriores a: 17.6,...

Flowise-CVE-2025-58434-Chain-59528

FlowiseAI CVE Chain - ATO CVE-2025-58434 y RCE CVE-2025-59528 ⚠️ Solo para fines educativos e investigación de seguridad autorizada. Ejecutar esta herramienta contra sistemas que no poseas o para los que no tengas permiso por escrito es ilegal. Tabla de contenido Este repositorio contiene una...

CVE-2024-25180

CVE-2024-25180 Resumen pdfmake es un paquete de impresión PDF puro de JavaScript del lado del cliente/servidor. La versión afectada de este paquete es vulnerable a la inyección de código arbitrario, permitiendo a un atacante ejecutar código arbitrario enviando una solicitud POST diseñada a la rut...

CVE-2024-28397-Exploit-Automation

CVE-2024-28397 Exploit Automation A Python automation script for exploiting the js2py Sandbox Escape vulnerability CVE-2024-28397. This tool automates the payload generation and delivery process to achieve Remote Code Execution RCE on vulnerable instances. ⚠️ Legal Disclaimer Usage of this tool fo...

CVE-2016-3714

CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imagickbuilder.py = Simple Payload Builder to Exploit CVE-2016-3714 imagickbypassshell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions Few Images of things working: Payload Builder: imagick...

CVE-2022-26134_conFLU

CVE-2022-26134 - conFLU PoC para explotar CVE-2022-26134 en Atlassian Confluence Uso del exploit root@kitploit: python3 conFLU.py -h Usage: conFLU.py -h -u URL -f F -cmd CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD,...

CVE-2026-82222

CVE-2026-82222 — GiveWP Author: Rx019 CVSS: 10.0 Critical Type: Unauthenticated PHP Object Injection → Remote Code Execution Plugin: GiveWP give — Donation Plugin and Fundraising Platform Affected: Patched: 4.16.8 Description GiveWP stores a donor's lastname in the PHP session without sanitizatio...

Shell-Shock

Shell Shock Authors : [email protected] Maintainers : Department : DevOps Licenses : Overview Shell Shock : Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands. Exploitation Vectors Payloads shellshock user agent =...

Onapsis_CVE-2025-31324_Scanner_Tools

Escáner de Vulnerabilidad e Indicador de Compromiso IoC para CVE-2025-31324 Vulnerabilidad de Carga de Metadatos de Visual Composer CVE-2025-31324 es una vulnerabilidad crítica CVSSv3 10 que afecta a los sistemas SAP NetWeaver, específicamente dentro del componente Visual Composer Metadata...

CVE-2024-6387-analysis

CVE-2024-6387 Análisis de la vulnerabilidad de condición de carrera de señal de OpenSSH Resumen de la vulnerabilidad CVE-2024-6387 es una vulnerabilidad de condición de carrera en el manejo de señales presente en las versiones de OpenSSH 8.5p1 a 9.7p1, conocida como "regreSSHion". Un atacante pue...

motionEye-RCE-through-config-parameter

MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that client-side validation within the web UI can be bypassed. This allows arbitrary input to be submitted, including payloads that can trigger execution on t...

CVE-2026-34197

CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...

log4shell-poc

CVE-2021-44228 Log4Shell POC Overview Proof of Concept for Remote Code Execution via JNDI Injection vulnerability in Apache Log4j 2.14.1. Web Hacking Course - Week 11 Assignment. Environment...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE Este es un exploit de CVE-2019-16278 para Nostromo 1.9.6 RCE. Este exploit permite RCE en la máquina víctima. Requisitos optparse socat sys Uso Puedes usar el exploit de la siguiente manera: root@kitploit: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80...

CVE-2025-55182

CVE-2025-55182 React2Shell Exploit Kit 🎯 Complete Working Exploit Demonstration This project provides a fully functional demonstration of CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability in React Server Components and Next.js. Status: ✅ WORKING - Achieves actual command...

CVE-2025-55182-React-RSC-Exploit

CVE-2025-55182 // REACT SERVER COMPONENTS RCE VISIÓN GENERAL PoC de exploit para CVE-2025-55182. Apunta a versiones inseguras y vulnerabilidades en funciones de validación de entrada en React Server Components. MECANISMO TÉCNICO Vector : Contaminación de prototipos a través de $1:proto :then...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ VULNERABILIDAD CRÍTICA - Explotación Activa Confirmada CVE-2025-6218 es una vulnerabilidad crítica de path traversal en WinRAR que permite la ejecución de código arbitrario. Actualmente explotada por grupos APT como GOFFEE, Bitter APT-C-08 y Gamaredon. 📋...

CVE-2026-49450: Insufficient Verification of Data Authenticity

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from packages/app-desktop/package.json, so the generated app-update.yml causes NsisUpdater.verifySignature to skip comparison of...

CVE-2026-61674: Stack-based Buffer Overflow

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-94383: Unrestricted Upload of File with Dangerous Type

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...