cve-2023-30990

cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...

CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

CVE-2019-11043

CVE-2019–11043: PHP-FPM Nginx 원격 코드 실행 취약점 취약점 설명 및 영향 CVE-2019–11043은 원격 코드 실행RCE 취약점입니다. 이 취약점은 Nginx 웹 서버에서 흔히 사용되는 FastCGI 프로세스 매니저인 PHP-FPM에 영향을 미칩니다. 이 결함은 Nginx 연결을 통해 요청을 처리할 때 PHP-FPM이 버퍼 제한을 제대로 구문 분석하지 못하는 데서 발생합니다. 공격자는 조작된 HTTP 요청을 전송하여 이 취약점을 악용할 수 있으며, 이를 통해 영향을 받는 서버에서 코드를 실행할 수...

rust-cve-2025-55182-scanner

CVE-2025-55182 스캐너 Rust Rust로 작성된 고성능 동시성 취약점 스캐너로, 여러 대상에서 CVE-2025-55182 Next.js Server Actions RCE를 탐지합니다. 🚀 기능 ⚡ 고성능 Rust 구현 🧵 멀티스레드 스캐닝 엔진 ⏱ 조정 가능한 타임아웃 및 재시도 시스템 📄 대량 대상 스캐닝 지원 📊 JSON + 텍스트 출력 보고서 🧠 빠르고 가벼운 실행 🔌 선택적 프록시 지원 🛡 보안 연구용으로 설계됨 📦 설치 1. 저장소 클론 root@kitploit: git clone...

CVE-2025-68613

CVE-2025-68613 — n8n RCE via Expression Injection For educational and authorized security research purposes only. Overview Critical RCE vulnerability CVSS 9.9 in n8n workflow automation platform. Authenticated users can execute arbitrary OS commands via the executeCommand node, bypassing sandbox...

tpadmin-CVE-2026-2113-poc

tpadmin-CVE-2026-2113-poc A proof-of-concept exploiting a Remote Code Execution with web server privileges via Arbitrary File Upload. Vulnerability Description A critical Remote Code Execution vulnerability exists in H-ui.admin system's WebUploader preview component. The...

vsftpd2.3.4-backdoor-exploit

vsftp2.3.4-backdoor-exploit vsftpd 2.3.4 Backdoor Exploit CVE-2011-2523 Requirements Python 3.11+ recommended psutil Python package Installation Windows 1. Make sure Python is installed: root@kitploit: py --version 2. Install dependencies: root@kitploit: py -m pip install psutil 3. Run the script...

CVE-2025-5548

🐞CVE-2025-5548 Desbordamiento de búfer en FreeFloat FTP Server 1.0 🎯 Explotación de Desbordamiento de Búfer en la Pila Este repositorio contiene la documentación y el desarrollo práctico de un proyecto de ciberseguridad centrado en la ingeniería inversa y la explotación de vulnerabilidades a nive...

React2Shell-PoC-CVE-2025-55182

React2Shell Exploitation Simulation CVE-2025-55182 Note: This document is for educational and security research purposes only. Do not use it to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability...

CVE-2026-32238_RemoteCodeExecutionOpenEMR8.0.0

CVE-2026-32238 - Remote Code Execution in OpenEMR Weakness CWE-78 : Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize...

CVE-2026-42778-POC

CVE-2026-42778 概要 Apache MINA の AbstractIoBuffer.getObject メソッドにおける不完全な修正。逆シリアライズ可能なクラスを制限するクラス名許可リスト検証が、読み取り対象クラスの静的初期化子が実行された後に適用されるため、検証が遅すぎます。これは、CVE-2024-52046 に対する元の修正が 2.1.X および 2.2.X ブランチに正しく適用されなかったために発生します。影響を受けるバージョン: - Apache MINA 2.1.0 から 2.1.11 - Apache MINA 2.2.0 から 2.2.6 エクスプロイト:...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...

CVE-2015-1925.RCE

CVE-2015-1925 The exploit targets Tivoli Fastback Server running on Windows 10 x86, build: 16299 , affecting version 6.1.4 , where an unauthenticated attacker can perform a buffer overflow through a raw socket connection , resulting in remote code execution RCE. This exploit assumes ASLR is not...

CVE-2026-2699

CVE-2026-2699 — Progress ShareFile Storage Zones Controller Authentication Bypass Critical Authentication Bypass CVSS 9.8 in customer-managed Progress ShareFile Storage Zones Controller SZC ≤ 5.12.3. 📋 Overview CVE-2026-2699 is a severe authentication bypass vulnerability affecting the web...

CVE-2026-5027

🔥 CVE-2026-5027 - Langflow Path Traversal Arbitrary File Write to RCE Unauthenticated Remote Code Execution via File Upload -orange?style=for-the-badge 📌 Overview Langflow suffers from a critical path traversal vulnerability in the file upload endpoint POST /api/v2/files. An attacker can send a...

CVE-2018-6537.RCE

CVE-2018-6537 El exploit está dirigido a Sync Breeze ejecutándose en Windows 10 x86, build: 16299 , afectando la versión 10.4.18 , donde un atacante no autenticado puede realizar un desbordamiento SEH a través de una conexión TCP, resultando en ejecución remota de código. Este exploit asume que...

CVE-2026-0848-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-0848 Scanner Detection tool for the CVE-2026-0848 vulnerability in NLTK arbitrary code execution in StanfordSegmenter. ⚡ Installation root@kitploit: git clone https://github.com/tu-usuario/CVE-2026-0848-Scanner.git cd CVE-2026-0848-Scanner pip install -r requirements.txt...

CVE-2017-14980.RCE

CVE-2017-14980 The exploit targets Sync Breeze Enterprise running on Windows 10 x86, build: 16299 , affecting version 10.0.28 , where an unauthenticated attacker can perform a buffer overflow via an HTTP-request body , resulting in arbitrary code execution. This exploit assumes all security...

CVE-2026-28134

CVE-2026-28134 Exploitation Report JetEngine = 3.7.2 — Authenticated Contributor+ Remote Code Execution via Twig SSTI Date: March 11, 2026 CVSS Score: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Plugin: JetEngine = 3.7.2 Plugin Slug: jet-engine CVE: CVE-2026-28134...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...