SpringBreakVulnerableApp

Spring Break Vulnerable Application This is a vulnerable application to test the exploit for the Spring Break vulnerability CVE-2017-8046. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up and sheltered environment su...

EUVD-2026-68519

In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools writeFileContent, suggestFileContent, and the replacement and state helpers resolved a model-supplied file path without a workspace-containment check. A crafted relative path such as ../.bashrc,...

CVE-2026-82217

In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools writeFileContent, suggestFileContent, and the replacement and state helpers resolved a model-supplied file path without a workspace-containment check. A crafted relative path such as ../.bashrc,...

CVE-2026-82217

In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools writeFileContent, suggestFileContent, and the replacement and state helpers resolved a model-supplied file path without a workspace-containment check. A crafted relative path such as ../.bashrc,...

CVE-2026-82217

Eclipse Theia versions 1.73.0 through 1.74.9 are affected by a path traversal vulnerability in the AI "Agent Mode" file-change tools (writeFileContent , suggestFileContent , and related helpers). The root cause is the absence of a workspace-containment check on model-supplied file paths, allowing...

CVE-2020-14321

نص برمجي بايثون لاستغلال CVE-2020-14321 - Moodle 3.9 سجلات المقررات الدراسية سمحت بتصعيد الامتيازات من دور المعلم إلى دور المدير وصولاً إلى تنفيذ الأوامر عن بعد RCE. كان بإمكان معلمي المقرر تعيين أنفسهم دور المدير داخل ذلك المقرر. الحمولة المستخرجة من:...

CVE-2020-36184

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. How to RCE pom.xml root@kitploit: 4.0.0 com.jacksonTest jacksonTest 1.0-SNAPSHOT...

poc-cve-2024-38396

CVE-2024-38396 and CVE-2024-38395 This PoC can e used either via a docker run or simply cat. This repository contains the docker file for vin01/escape-seq-test:cve-2024-38396. The PoC simply opens a calculator on OS X. How to run: Example 1. cat simpler-poc-title-report-code-execution.txt Example...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Telesquare TLR-2005KSH Remote Code Execution RCE An issue has been identified in Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 that may allow attackers to execute arbitrary system commands by exploiting the Cmd parameter. This vulnerability could potentially enable unauthorized...

Dubbo-deserialization

अपाचे डब्बो डिसीरियलाइज़ेशन भेद्यता अनुसंधान इस रिपॉजिटरी में Apache Dubbo डिसीरियलाइज़ेशन भेद्यताओं से संबंधित अनुसंधान सामग्री, प्रूफ-ऑफ-कॉन्सेप्ट कोड और शोषण उपकरण शामिल हैं, मुख्य रूप से CVE-2020-1948 पर केंद्रित। रिपॉजिटरी संरचना निर्देशिकाएँ Hessian-Deserialize-RCE-master : डब्बो में हैसियन...

CVE-2025-47812-poC

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE-2025-47812 to run commands and get a reverse shell. For educational use only. Vulnerability Details This security vulnerability was publicly disclosed and detailed by RCESecurity...

CVE-2019-16663

CVE-2019-16663 Centreon v19.04 Remote Code Execution CVE-2019-16662 के लिए आधिकारिक शोषण कोड...

CVE-2022-39073

CVE-2022-39073 Firmware details: root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prerequisites requests pip install requests Command Injection The vulnerability is a shared command injection between the ztenetlinkdetect binary and the WATCHDOGSWITCH...

CVE-2023-51385

CVE-2023-51385 OpenSSH ProxyCommand RCE 1. जब आपका ProxyCommand इस प्रकार कॉन्फ़िगर किया गया हो: root@kitploit: Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. प्रमाण अवधारणा के लिए निम्नलिखित कमांड का उपयोग करें root@kitploit: git clone...

sqlpad-rce-exploit-CVE-2022-0944

SQLPad RCE Exploit This repository contains an exploit script for CVE-2022-0944 in SQLPad, a vulnerability that allows for Remote Code Execution RCE via the /api/test-connection endpoint. Overview The provided script exploit.py demonstrates how to exploit the RCE vulnerability in SQLPad. The scri...

CVE-2024-21633

MobSF Remote code execution via CVE-2024-21633 I have found an arbitrary file write in apktool and reported via github security advisory. I was aware that many projects were relied upon or dependent to apktool but after the publish of advisory and fix not many seem to be noticed or cared about it...

Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

Apache Superset pickle library code execution IBM : Apache Superset could allow a remote attacker to execute arbitrary code on the system, caused by the use of unsafe load method from the pickle library to deserialize data. By sending specially-crafted request, an attacker could exploit this...

CVE-2020-11978

CVE-2020-11978: Remote code execution in Apache Airflow's Example DAGs Information Description: This vulnerability allows RCE when Airflow's example DAGs are loaded, potentially unauthenticated with CVE-2020-13927 CVE Credit : xuxiang of DtDream security Versions Affected:...

CVE-2024-27956

Wordpress SQLI-2-RCE Exploit This Python script exploits CVE-2024-27956, a vulnerability in Wordpress that allows for SQL Injection leading to Remote Code Execution RCE. Features Multi-threaded Exploitation: Utilizes concurrent threads to exploit multiple Wordpress instances simultaneously. Dynam...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278 का शोषण करने के लिए सरल Python स्क्रिप्ट, एक पथ ट्रैवर्सल भेद्यता के कारण जो अनप्रमाणित RCE की ओर ले जाती है। Usage: python3 nostroSploit.py targetIP targetPort optional command to run इससे प्रेरित:...