CVE-2018-6574-go-get-RCE

Este repositorio no tiene un README...

CVE-2022-24637

CVE-2022-24637 Exploit for the Unauthenticated RCE in Open Web Analytics OWA 1.7.3. This work is based on https://devel0pment.de/?p=2494. DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Python-based exploit targets a command injection vulnerability in several D-Link NAS products via the /cgi-bin/accountmgr.cgi?cmd=cgiuseradd endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary system commands...

CVE-2023-43263

CVE ID : CVE-2023-43263 Vulnerability Type : Cross-Site Scripting Description : Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component. Steps to reproduce : Enter payload in markdown component input: root@kitploit:...

CVE-2021-44228-PoC

Entorno de laboratorio autónomo PoC que ejecuta una reverse-shell con Log4Shell CVE-2021-44228 Este es un entorno de laboratorio autónomo que ejecuta el exploit de forma segura, todo desde docker compose. Las versiones afectadas son Apache Log4j =2.0–2.14.1 y el CVE se rastrea como CVE-2021-44228...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

React2Shell-CVE-2025-55182-PoC-Reverse-Shell

🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...

CVE-2026-3844

CVE-2026-3844 PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE...

CVE-2026-30691

CVE-2026-30691 - Vulnerability Advisory Official MITRE vulnerability record details and technical documentation for CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allo...

CVE-2022-35914

Script en Ruby para el CVE-2022-35914 - RCE en GLPI CVE-2022-35914 Simplemente añade el objetivo al script. Uso: root@kitploit: ruby.exe exploit.rb = whoami Puedes cerrar con: root@kitploit: = exit...

CVE-2024-53677

CVE-2024-53677 - Entorno de Laboratorio de Análisis de Causa Raíz de Apache Struts 2 Este repositorio proporciona un entorno basado en Docker para reproducir la vulnerabilidad CVE-2024-53677 en Apache Struts 2. Esta vulnerabilidad implica un traversal de ruta a través de la funcionalidad de carga...

CVE-2025-25620

CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored Cross-Site Scripting XSS in the "Create Assignment" function, allowing attackers to execute malicious scripts in the context of other users' sessions. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2:...

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4JExploitation-VulnerabiliyCVE-2021-44228. introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j. CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact. the...

exploit-js2py

CVE-2024-28397 - Escape de Sandbox de js2py Descripción La vulnerabilidad CVE-2024-28397 afecta a las versiones de js2py hasta v0.74, una biblioteca de Python que permite ejecutar código JavaScript dentro del intérprete de Python. El fallo se encuentra en la implementación del método...

CVE-2023-44764_ConcreteCMS-Stored-XSS---Site_Installation

ConcreteCMS Stored XSS v.9.2.1 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en ConcreteCMS v.9.2.1 permite a un atacante local ejecutar código arbitrario a través de un script manipulado en el parámetro SITE durante la instalación o en la Configuración. Vectores de ataque:...

cve-2024-6387_AImade

Presentación del Código de Prueba para CVE-2024-6387 Introducción Este documento presenta un script en Python diseñado para probar la vulnerabilidad CVE-2024-6387, identificada en OpenSSH. Esta vulnerabilidad es una condición de carrera en el manejador de señales SIGALRM que puede permitir la...

drupal-cve-2018-7600-poc

README Drupal Drupalgeddon 2 Unauthenticated Remote Code Execution CVE-2018-7600 Drupal versions prior to 7.58, 8.x versions prior to 8.3.9, 8.4.x versions prior to 8.4.6, and 8.5.x versions prior to 8.5.1 allow remote attackers to execute arbitrary code due to an issue affecting multiple...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

CVE-2023-43355-CMSmadesimple-Reflected-XSS---Add-user

CMSmadesimple Reflected XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in install/adduser.php of CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again in the My Preferences - Add...

CVE-2024-5084-Red-Team

🚀 HashForm Exploit – Demo de Laboratorio Este repositorio contiene un exploit de prueba de concepto para CVE-2024-5084, una vulnerabilidad encontrada en el plugin Hash Form de WordPress. Está destinado únicamente para aprendizaje, pruebas en laboratorio e investigación de seguridad. 📌 Acerca de l...