spinnaker-poc

Spinnaker Vulnerability POCs Proof-of-concept demonstrations for CVE-2026-32604 and CVE-2026-32613, two 10.0 severity vulnerabilities in Spinnaker that allow for code execution and production cloud credential theft. Video walkthrough of how to use these POCS Technical blog with more details...

nifi-CVE-2026-39816-poc

Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration for CVE-2026-39816, an EXECUTECODE permission bypass in Apache NiFi 2.8.0 that lets a flow designer who has been deliberately denied code-execution privileges run arbitrary Groovy in the NiFi JVM via the graph bundle's ExecuteGraphQuer...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...

PoC-CVE-2026-20841

PoC CVE-2026-20841 Description This project is a simple Proof of Concept PoC regarding Windows Notepad vulnerability about "remote code execution". Attackers have the ability to build a special .md file and by tricking users with Social Engineering skills into clicking the link within the .md fil...

BluetoothDucky

BluetoothDucky CVE-2023-45866 - BluetoothDucky implementation Using DuckyScript Unauthenticated bluetooth remote code execution. In short, run keyboard commands without pairing with their device This is an implementation of the CVE discovered by marcnewlin...

CVE-2021-1732-EXP-

This repository does not have a README...

CVE-2024-49112

LDAP Nightmare An exploit for CVE-2024-49112 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

CVE-2023-22527

CVE-2023-22527 Atlassian Confluence - Remote Code Execution CVE-2023-22527 Poc root@kitploit: POST /template/aui/text-inline.vm HTTP/1.1 Host: localhost:8090 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/119.0.6045.159 Safari/537.36 Content-Type:...

connectwise-automate-AiTM-rce

ConnectWise Automate: Удалённое выполнение кода через «злоумышленника посередине» Содержание Предыстория Хронология Мысли и выводы Ответственное раскрытие PoC-код Отчёт, предоставленный ConnectWise Краткое описание Уязвимая конфигурация Воздействие Технические детали 1. HTTP-транспорт 2...

CTT-NFS-Vortex-RCE

CTT-NFS-Vortex-RCE New Physics Disclosure This repository contains a full weaponized exploit for CVE-2026-21509 , targeting the Windows Network File System NFSv4.1 kernel-mode driver nfssvr.sys. CTT-NFS-Vortex-RCE CVE-2026-21509 ⚠️ Technical Advisory: New Physics Disclosure This repository contain...

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — Лаборатория RCE без учётных данных для nginx-ui Предупреждение: Этот репозиторий предназначен исключительно для образовательных целей и авторизованных исследований в области безопасности. Все продемонстрированные здесь методы должны применяться только к системам,...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...

CVE-2026-20841

CVE-2026-20841 - Exécution de code à distance dans le Bloc-notes Windows PoC pour une faille d'exécution de code à distance dans le moteur de rendu Markdown du Bloc-notes Windows. Le moteur Markdown ne restreint pas les protocoles d'URL, ce qui permet de déclencher des gestionnaires de protocoles...

CVE-2023-31446-Remote-Code-Execution

CVE-2023-31446-Remote-Code-Execution Repository contains description for CVE-2023-31446 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31446 Vendor: Cassia Networks Product: Cassia Gateway Firmware Version: http:///bypass/config?type=sqs&keyId=&key=&queueUrl= Base...

CVE-2026-37637

CVE-2026-37637 Proof of Concept for CVE-2026-37637 - Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload in filemanager.php. Overview CVE-2026-37637 is a Remote Code Execution vulnerability affecting Alexantr filemanager v1.0. The vulnerability exists in the...

EpSiLoNPoInTlnk

README EpSiLoNPoInTlnk CVE-2026-21510 - .LNK Generator Tool for generating .lnk files exploiting the CVE-2026-21510 vulnerability Windows ShellLink Remote Code Execution. Designed for offensive security research, authorized penetration testing, and vulnerability analysis. Legal Warning ⚠️ THIS TOO...

CVE-2024-56278

CVE-2024-56278 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WP Ultimate Exporter Vulnerable version = 2.9.1 Component slug wp-ultimate-exporter Component link https://wordpress.org/plugins/wp-ultimate-exporter/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A4: Insecure...

CVE-2024-4577

lol CVE-2024-4577 1. exploit command RCE value root@kitploit: python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory find...

CVE-2026-22241

CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...

CVE-2026-27966--RCE-in-Langflow

🚀 CVE-2026-27966 - Langflow RCE Exploit Tool All-in-One Exploitation Tool untuk CVE-2026-27966 📋 Deskripsi Tool ini adalah all-in-one exploit untuk CVE-2026-27966, sebuah kerentanan Remote Code Execution RCE pada Langflow yang memungkinkan attacker mengeksekusi perintah sistem secara remote. CVSS...