Spring-Boot-Tomcat-CVE-2025-24813

CVE-2025-24813: Apache 1. Explanation Tomcat is vulnerable because of two separate vulnerabilities, the first is a weakness in the DefaultServlet which allows partial puts to write a temp directory see:...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

CVE-2026-58138

CVE-2026-58138 — Conductor 3.21.21..3.30.2 Unauthenticated Remote Code Execution Critical Remote Code Execution Vulnerability in Orkes Conductor 📋 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE vulnerability affecting Orkes Conductor versions 3.21.21 through 3.30....

NoFaxGiven

NoFaxGiven - Code Execution & Persistence in NETWORK SERVICE FAX Service A fax routing extension is a DLL that adds routing functionality to the fax service. Multiple fax routing extensions can reside on one server. When the fax server receives a fax transmission, it routes the received document...

CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-

CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ WARNING : This script is for educational purposes and testing in authorized environments only. Unauthorized use is prohibited and may be illegal. 📋 Description...

CVE-2018-17553

CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS versión 2.8 y anteriores Esta prueba de concepto fue creada mientras trabajaba en la máquina Black Pearl de TCM. No pude encontrar a nadie que publicara un PoC aparte de usar Metasploit. Como estoy evitando Metasploit en mi viaje de hacking para lueg...

CVE-2025-49071

CVE-2025-49071 Flozen 1.5.1 - Unauthenticated Arbitrary File Upload Description : Flozen Theme 1.5.1 - Unauthenticated Arbitrary File Upload Description The Flozen Theme for WordPress versions up to and including 1.5.1 is vulnerable to unauthenticated arbitrary file upload, due to missing...

CVE-2026-64638-PoC-Exploit

🌀 CVE‑2026‑64638 – Suite de seguridad WordPress XSS2Shell ⚠️ SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, blue teams y probadores de penetración. El acceso no autorizado a sistemas informáticos e...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

CVE-2015-6967

CVE-2015-6967 Un exploit para el gestor Nibbles versión 4.0.3. Este exploit permite realizar RCE. Requisitos optparse, signal, requests Uso root@kitploit: python3 CVE-2015-6967.py --url http://10.129.156.150/ --username admin --password nibbles + Login Succesfuly! + Uploading shell... Shell has...

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...

MAL-008

MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 en Cisco SD-WAN Cisco SD-WAN v20.4.2.1 utiliza una versión antigua de SSH OpenSSH7.6p1 que es susceptible al ataque “SSHtranger Things”. Si una víctima intenta conectarse a un servidor SSH malicioso/comprometido, este ataque puede utilizarse...

CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE-

CVE-2025-49132 Pterodactyl Panel - Unauthenticated Remote Code Execution RCE 🔎 Summary CVE‑2025‑49132 is a critical Remote Code Execution vulnerability affecting Pterodactyl Panel = 1.11.10. An unauthenticated attacker can exploit improper input validation in the /locales/locale.json endpoint to...

CVE-2026-2035703-x300

CVE-2026-2035703: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Under coordinated disclosure 90-day embargo Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-2035703 Severity: Critical CVSS 9.8 CWE: CWE-78 OS Command...

log4j

Log4J Zero-Day Compilation of log4j OSINT findings, including Detection, Attack Surface, Mitigation, IoCs. I. Overview Summary This vulnerability makes it possible for any attacker who can inject text into log messages or log message parameters into server logs to load code from a remote server...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

CVE-2019-18655

CVE-2019-18655 metasploit module. SEH based buffer overflow in file sharing wizard app v.1.5.0. CVE summary: File Sharing Wizard version 1.5.0 is affected of Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution a...

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...

CVE-2025-3248

CVE-2025-3248 Exploit Tool Documentation Introduction This tool is used to exploit the CVE-2025-3248 vulnerability a Python-based code injection vulnerability to achieve remote command execution RCE on the target server by crafting malicious payloads. The vulnerability exists in a web application...

CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 Test Environment root@kitploit: mkdir CVE-2021-3129-docker cd CVE-2021-3129-docker wget https://raw.githubusercontent.com/vulhub/vulhub/master/laravel/CVE-2021-3129/docker-compose.yml docker compose up -d Usage root@kitploit: git clone...