517651 matches found
CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit
🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework...
CVE-2021-41773
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...
CVE-2025-3052
🐞 CVE-2025-3052: IhisiParamBuffer Memory Corruption This repository centralizes research material related to CVE-2025-3052, a memory corruption vulnerability in a UEFI module signed with Microsoft's third-party certificate that allows an attacker to corrupt security-critical firmware structures,...
teamcity-CVE-2026-63077-pcap
teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...
CVE-2026-18718
Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...
Undocumented-RCE-in-PLY
Undocumented Remote Code Execution in PLY CVE‑2025‑56005 root@kitploit: CVE ID: CVE‑2025‑56005 Disclosure Date: July 1, 2025 Affected Product: PLY Python Lex‑Yacc Affected Version: 3.11 PyPI distribution Vendor: PLY Python Lex‑Yacc Affected Component: ply/yacc.py — LRTable.readpickle via...
cve-2025-9951-ffmpeg-jp2-poc
CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...
abdal-cve-2026-63030
English | فارسی 🛡️ Abdal CVE-2026-63030 PoC Exploits Abdal CVE-2026-63030 is a defensive WordPress exposure verifier for the REST API batch route confusion tracked as CVE-2026-63030. The issue can be chained with CVE-2026-60137 on affected WordPress releases and may lead to remote code execution...
abdal-cve-2026-60137
English | فارسی 🛡️ Abdal CVE-2026-60137 PoC Exploits Abdal CVE-2026-60137 is a defensive WordPress exposure verifier for the insufficient sanitization of the authornotin parameter in WPQuery, tracked as CVE-2026-60137. The vulnerability can allow SQL injection when untrusted input reaches the...
omapi-cve-2015-6606-exploit
Simple Exploit for Verification of CVE-2015-6606 This is a simple exploit to verify a code injection vulnerability that exists in the SEEK smartcard service versions 3.1.0 and below CVE-2015-6606, Google internal bug ANDROID-22301786. The vulnerability allows specially crafted Android application...
MySQL-Remote-Root-Code-Execution
MySQL-Remote-Root-Code-Execution Usage root@kitploit: python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...
CVE-2019-18935-exploit-study
CVE-2019-18935-exploit-study Estudio en profundidad de CVE-2019-18935, que afecta a Telerik UI for ASP.NET AJAX. Abarca la vulnerabilidad de deserialización de .NET, el controlador RadAsyncUpload, las cadenas de gadgets, la explotación de ensamblados de modo mixto y las estrategias de mitigación...
CVE-2025-55182_PoC
CVE-2025-55182 - React Server Components 远程代码执行 PoC 作者： rl0x01 描述 CVE-2025-55182 是一个通过 Flight 协议影响 React Server Components 的严重（CVSS 10.0）远程代码执行（RCE）漏洞。 受影响版本 Next.js| React ---|--- 14.3.0-canary.77 至 15.0.4| 19.0.0 15.1.1-canary.0 至 15.1.8| 19.1.0 15.2.0-canary.0 至 15.2.5| 19.1.1 15.3.0-canary.0 ...
CVE-2025-10230
CVE-2025-10230 — Samba WINS Hook 命令注入 作者对因使用本工具而造成的误用或损害不承担任何责任。 研究仅用于教育和防御目的。 描述 此仓库包含针对 CVE-2025-10230 的概念验证（PoC），该漏洞是 Samba 的 WINS hook 机制中的一个命令注入缺陷。 该缺陷影响满足以下条件的 Samba 安装： 已启用 wins support = yes 在 wins hook = ... 中定义了自定义 shell 命令 服务器收到一个畸形的 NetBIOS 注册 请求 NetBIOS 名称被直接拼接进 shell 调用 中，从而实现代码执行 此...
CVE-2025-25257
CVE-2025-25257 由watchtowr及其他人在github上发布的针对CVE-2025-25257的漏洞利用代码，在我从官方供应商网站下载的fortiweb安装版本上无法工作。我从这些漏洞利用代码中提取了一些代码，制作了一个能够在我的环境中弹出反向shell的POC。反向shell的IP地址和端口是硬编码的，当然需要更改。 漏洞分析及逐步演示已在我在YouTube频道的两个视频中描述（意大利语，英文字幕）： 第1部分：https://youtu.be/Z6I4adGuJ1c 第2部分：https://youtu.be/Z6I4adGuJ1c...
CVE-2024-2887-REPORT
SSD Advisory – Google Chrome RCE Source: ssd-disclosure.com/ssd-advisory-google-chrome-rce Summary A critical remote code execution vulnerability in Google Chrome versions 123 and earlier affecting WebAssembly WASM garbage-collection type handling. The bug allows type confusion that can be...
CVE-2026-47103-python-statemachine-rce
CVE-2026-47103：Python StateMachine 通过 SCXML eval 注入实现远程代码执行 严重性： 严重，CVSS 4.0 9.3 ，CVSS 3.1 9.8 （由 CNA VulnCheck 指定） 向量（v4.0）： CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 向量（v3.1）： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 受影响版本： Python StateMachine = 3.0.0,...
CVE-2024-4577-PHP-RCE
PHP RCE PoC CVE-2024-4577: Argument Injection in PHP-CGI Overview This repository contains scripts to check for the CVE-2024-4577 vulnerability, an argument injection issue in PHP-CGI. You can use the provided Bash, Go, and Python scripts to test a list of domains for this vulnerability. I've als...
react2shell
React2Shell 针对 CVE-2025-55182 未认证远程代码执行漏洞（又名 React2Shell）的概念验证漏洞利用程序。 该脚本用于在以下 Next.js 版本及更早版本上获取 shell； 15.0.4 及以下 15.1.8 及以下 15.2.5 及以下 15.3.5 及以下 15.4.7 及以下 15.5.6 及以下 16.0.6 及以下 14.3.0-canary.77 及更高版本 它仅在 16.0.6 版本上测试过。 用法 root@kitploit: $ ./react2shell.py --help d8888b. d88888b .d8b. .o88b...