CVE-2026-5817-PoC

CVE-2026-5817: Docker Model Runner container-to-host RCE / Escape Any container on a Docker Desktop 4.40.0 to 4.67.x host can run code on the host with two HTTP requests. No socket mount, no --privileged, no caps. How Every container can reach Model Runner at model-runner.docker.internal with no...

struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 XML Deserialization RCE This repository demonstrates exploitation of Apache Struts S2-052 CVE-2017-9805 using malicious XML deserialization. The exploit was developed while solving the INE eWPTX Practice Range – Struts XML Deserialization RCE lab. Vulnerability Overview Apach...

CVE-2024-9707

CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the...

lab-cve-2025-57819

Work in Progress FreePBX CVE-2025-57819 Lab - Unauth SQLi → RCE Chain Nuclei POC Spin up a reproducible FreePBX 15 lab Docker to validate CVE-2025-57819 — a critical unauthenticated SQL injection in userman AJAX endpoints that can be chained to RCE. Includes a working Nuclei template...

CVE-2024-23897-Vulnerabilidad-Jenkins

Exploitation of Vulnerability CVE-2024-23897 in Jenkins Vulnerability Description: CVE-2024-23897 CVE-2024-23897 is a critical vulnerability discovered in Jenkins, a popular continuous integration tool. This vulnerability allows remote command execution RCE on the Jenkins server due to a lack of...

CVE-2014-6271

🚨 CVE-2014-6271 — “Shellshock” 25-Year Zero-Day Remote Code Execution in GNU Bash via Environment Variables 📖 Overview CVE-2014-6271 , nicknamed Shellshock also known as Bashdoor, is a critical remote code execution RCE vulnerability in the GNU Bash shell. An attacker can send specially crafted...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + Ransomware Disclaimer This project is solely for educational purposes. This project utilise code from rkshrksh/2048-Game and kangtastic/cve-2019-2215. Project Description This project is part of Singapore Institute of Technology Mobile Security module. The project...

CVE-2025-49113-Roundcube-RCE

CVE-2025-49113 — Roundcube Post-Auth RCE via PHP Object Deserialization Overview...

CVE-2011-2523-exploit

CVE-2011-2523 Exploit vsFTPd 2.3.4 Backdoor This project demonstrates exploitation of the vsFTPd 2.3.4 backdoor vulnerability CVE-2011-2523 using Python and pwntools. Disclaimer: This project is for educational and authorized penetration testing purposes only. Do NOT use against systems without...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauthenticated RCE root@kitploit: ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

CVE-2025-32434-exploit

Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

Authenticated PRTG network Monitor remote code execution Based on https://www.exploit-db.com/exploits/46527 Usage: simply manually edit the script to include your Target URL, admin username and password like so: root@kitploit: TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin201...

CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...

Lenovo-CVE-2025-8061

CVE-2025-8061 is a privilege escalation vulnerability in Lenovo's LnvMSRIO.sys driver. The driver exposes IOCTL handlers that allow any user-mode process including unprivileged users to: Read/write arbitrary Model-Specific Registers MSRs Read/write arbitrary physical memory This gives a standard...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview...

cve-2025-32433_rce_exploit

Erlang/OTP SSH – CVE-2025-32433 TryHackMe Lab ⚠️ Educational Use Only This project is strictly for learning and lab practice on the official TryHackMe room: https://tryhackme.com/room/erlangotpsshcve202532433 Do not use this tool against systems you do not own or have explicit permission to test...

CVE-2025-46816

CVE-2025-46816 POC for exploiting goshs code execution on versions 1.0.5...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 Exploit ⚠️ DISCLAIMER - EDUCATIONAL USE ONLY This exploit is for authorized penetration testing and educational purposes only. Unauthorized access to computer systems is illegal. The author is not responsible for any misuse. 📋 Overview CVE-2021-22911 is a critical...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 is an authentication bypass resulting in an information leak on Joomla! Servers. Although rated as a CVSSv3 5.3 Medium severity by NVD, this vulnerability could allow an attacker to achieve code execution under the right circumstances. That likely justifies the...