DedeCMS-getshell-CVE-2023-2928-

Este repositorio no tiene un README...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution Una vulnerabilida de categoría RCE Remote Code Execution, encontrada cuando atacantes no autenticados pueden ejecutar codigo Groovy arbitrario remotamente sin la autenticación ni el accesso previo Guest User. A continuación un P...

CVE-2025-51820

CVE-2025-51820 A critical Remote Code Execution RCE vulnerability CVE-2025-51820 has been discovered in the Shopping Portal v1.0. 🚨 Remote Code Execution in Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Introduction In today’s digital world, Remote Code Execution RCE remains one of the mos...

CVE-2022-0944_RCE_POC

CVE-2022-0944 Exploit de prueba de concepto para SQLPad RCE CVE-2022-0944 que conduce a un RCE con una revershell a la PC del atacante. Uso root@kitploit: usage: script.py URL IP PORT positional arguments: URL URL a SQLPad IP Dirección del host del listener para la shell inversa PORT Puerto del...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: root@kitploit: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python...

Project-Exploitation-of-Webmin-Authentication-Vulnerability

Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...

rConfig_rce

rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...

CVE-2025-50460

CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

CVE-2016-010033-010045

CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...

CVE-2025-66478

CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...

PoC-CVE-2015-10141-Xdebug

PoC-CVE-2015-10141 Custom Python exploit for Xdebug ≤ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax root@kitploit: python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address...

CVE-2025-6384

CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2024-42327_Zabbix_SQLi

🛡️ Script de Explotación de Inyección SQL en Zabbix 7.0.0 Un script en Python para explotar una vulnerabilidad de inyección SQL autenticada en Zabbix 7.0.0 , que admite múltiples modos de acción, incluida la extracción de datos de usuario, fuga de tokens de sesión, ejecución remota de comandos RCE...

CVE-2024-12209

CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring = 2.17.0 - Vulnerabilidad de inclusión de archivos locales no autenticada Descripción El plugin WP Umbrella: Update Backup Restore & Monitoring para WordPress es vulnerable a Inclusión de Archivos Locales en todas las versiones hasta ...

zoneminder_CVE-2023-26035

Exploit - ZoneMinder CVE-2023-26035 Hay una Ejecución Remota de Código RCE sin autenticación que afecta a las instantáneas de ZoneMinder. Esto es un exploit para CVE-2023-26035. Versiones afectadas ZoneMinder 1.36.33 y ZoneMinder 1.37.33. Uso Comprobar si el objetivo es vulnerable: root@kitploit:...

CVE-2020-5902

CVE-2020-5902 Script de Python para verificar CVE-2020-5902 dispositivos F5 BIG-IP. Uso root@kitploit: python3 CVE-2020-5902.py -i Salida root@kitploit: - Script de Python para verificar CVE-2020-5902 dispositivos F5 BIG-IP. | codificado por Abdullah AlZahrani ! Tu objetivo: 127.0.0.1 I /etc/pass...