534217 matches found
CVE-2025-49132-PHP-PEAR
CVE-2025-49132: RCE no autenticado en Pterodactyl Panel mediante el mĆ©todo PHP PEAR Tabla de contenidos DescripciĆ³n general Detalles de la vulnerabilidad AnĆ”lisis tĆ©cnico Flujo del exploit InstalaciĆ³n Uso Ejemplos MitigaciĆ³n Descargo de responsabilidad Referencias Autor DescripciĆ³n general Este...
CVE-2023-38035-MobileIron-RCE
MobileIron CVE-2023-38035 Exploit README.md Description This bash script automates the process of scanning for vulnerable MobileIron systems that are susceptible to the CVE-2023-38035 exploit. The script performs multiple checks, including checking for required programs, downloading potential...
CVE-2019-19781-CitrixRCE
Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781 References: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ Bypassing: 1 - Deleted / Modified scripts at: /vpn/../vpns/portal/scripts/ 2 - Forward Slash "/" issues after perl commnad...
CVE-2019-2729_creal
CVE-2019-2729 - creal PoC for exploiting CVE-2019-2729 on WebLogic Exploit Usage root@kitploit: python3 creal.py -h usage: creal.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --command CMD...
CVE-2015-9331
CVE-2015-9331 POC Vulnerability Description CVE-2015-9331 is an arbitrary file upload vulnerability in the WordPress plugin WP All Import. This vulnerability allows an unauthenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution. Affected Versions...
MySQL-Remote-Root-Code-Execution
MySQL-Remote-Root-Code-Execution Usage root@kitploit: python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...
CVE-2023-43654
CVE-2023-43654 ShellTorch is a chain of 3 Critical Vulnerabilities in PyTorch TorchServe - the default inference server of PyTorch. This is an End-to-End POC for an SSRF vulnerability which leads to Arbitrary Remote Code Execution from the network 1. Run TorchServe 0.8.1 root@kitploit: docker run...
Apache Struts <=2.5.20 - Remote Code Execution
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation when evaluated on raw user input in tag attributes, which may lead to remote code execution. id: CVE-2019-0230 info: name: Apache Struts =2.5.20 - Remote Code Execution author: geeknik severity: critical description: Apache Struts 2.0.0 ...
Zoho ManageEngine ADAudit Plus <7600 - XML Entity Injection/Remote Code Execution
Zoho ManageEngine ADAudit Plus before version 7060 is vulnerable to an unauthenticated XML entity injection attack that can lead to remote code execution. id: CVE-2022-28219 info: name: Zoho ManageEngine ADAudit Plus 7600 - XML Entity Injection/Remote Code Execution author: dwisiswant0 severity:...
Microsoft SharePoint Server - Authentication Bypass (ToolShell)
Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...
Sonicwall - Pre-Authentication Arbitrary File Read
Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...
CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis
This repository does not have a README...
Strapi-RCE
Strapi-RCE Exploit script showcasing a mixture of CVE-2019-18818 and CVE-2019-19609 for unauthenticated remote code execution in Strapi CMS. Exploit This script exploits a vulnerability in Strapi CMS versions 3.0.0-beta.17.4 and lower, allowing for unauthenticated remote code execution. Descripti...
ActiveMQ-RCE
ActiveMQ RCE Effect version verison open -a calculator Open a http server root@kitploit: python3 -m http.server Run the Main.java file change the address as needed...
CVE-2021-26084
CVE-2021-26084 Proof of concept for CVE-2021-26084. Confluence Server Webwork OGNL injection Pre-Auth RCE Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. Command Limiations Due to the payload, it is not possible to pass some...
RCE-in-Spring-Cloud-CVE-2022-22963
Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: root@kitploit: $ nc -lvnp 9001 Run the exploit example with default port 9001 on...
Strutter
Strutter Proof of Concept for CVE-2018-11776, comes complete with the ability to search Shodan API for targets CVE-2018-11776 Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper actions...
CVE-2022-3552
CVE-2022-3552 BoxBilling=4.22.1.5 - Remote Code Execution RCE Usages root@kitploit: python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...
couchdb-exploit
š CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution š Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| š“...
CVE-2021-21975
CVE-2021-21975 VMware vRealize Operations Manager API Server Side Request Forgery SSRF vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments while unifying public cloud...