1132392 matches found
Thunderstorm
Thunderstorm Thunderstorm is a modular framework to exploit UPS devices. For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future. CVE Thunderstorm is currently capable of exploiting the following CVE: CVE-2022-47186 โ...
Blackash-CVE-2025-0282
Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...
CVE-2025-49844
CVE-2025-49844 - RediShell Use-after-free en el scripting Lua de Redis que conduce a la ejecuciรณn remota de cรณdigo. Resumen del CVE Redis es una base de datos de cรณdigo abierto en memoria. CVE-2025-49844 es una vulnerabilidad de use-after-free en el motor de scripting Lua integrado de Redis. Un...
CVE-2025-1302_jsonpath-plus_RCE
CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: poc.py A proof-of-concept exploit script for CVE-2025-1302, which targets an RCE vulnerability in the jsonpath-plus library. When run against a vulnerable service endpoint, the script attempts to trigger remote code execution via a JSONPath...
CVE-2020-14882
CVE-2020-14882 coherence shellsession calc.exe root@kitploit: import requests url = 'http://:/console/images/%252E%252E%252Fconsole.portal' \ '?nfpb=true&pageLabel=HomePage1&handle=com.tangosol.coherence.mvel2.sh.ShellSession' ...
CVE-2026-11645
CVE-2026-11645 - V8 in Google Chrome prior to Remote Code Execution Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-06-09...
CVE-2023-44771_ZenarioCMS--Stored-XSS---Page-Layout
ZenarioCMS Stored XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout. Attack Vectors: Scripting a vulnerability in the sanitization of the entry in the...
ROOT-OS-DEBIAN-11-CVE-2026-73076 CVE-2026-73076 in vim - Patched by Root
Root has patched CVE-2026-73076 in the vim package for Root:Debian:11. Multiple fixed versions available...
CVE-2017-9101
PlaySMS 1.4 authenticated RCE Simple method of performing remote code execution through the Phonebook CSV upload issue as described on ExploitDB. Either run a single command: root@kitploit: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token...
CVE-2026-23744
CVE-2026-23744 MCPJam inspector Ejecuciรณn remota de cรณdigo: Uso de la prueba de concepto POC: root@kitploit: python3 cve-2026-23744.py --target https:// --att-ip --att-p...
wp_CVE-2020-35489_checker
wpCVE-2020-35489checker CVE-2020-35489 - Introduction The wpCVE-2020-35489checker is a Python command-line tool designed to check if a WordPress website is vulnerable to CVE-2020-35489. This particular vulnerability stems from a security flaw in the WordPress Contact Form 7 plugin versions before...
CVE-2019-17147
CVE-2019-17147: TP-Link TL-WR841N Exploitation Overview This repository documents the comprehensive reverse engineering and exploitation of CVE-2019-17147 , a critical remote code execution RCE vulnerability in the TP-Link TL-WR841N router MIPSEL architecture. The vulnerability resides in the htt...
CVE-2021-44228-Apache-Log4j-Rce
CVE-2021-44228Apache Log4j Remote Code Execution๏ผ all log4j-core versions =2.0-beta9 and Do not rely on a current Java version to save you. Update Log4 or remove the JNDI lookup. Disable the expansion seems a pretty bad idea anyways. Bypass rc1...
CVE-2022-24706
CVE-2022-24706 Apache CouchDB 3.2.1 - Comprobador de Ejecuciรณn Remota de Cรณdigo RCE Uso: nmap -p 4369 --script CVE-2022-24706.nse --script-args cookie=monster,timeout=5000...
CVE-2024-29269
Telesquare TLR-2005KSHRCE CVE-2024-29269 Batch scan/exploit 1.ใใฎใใผใซใฏใปใญใฅใชใใฃใในใใฎใฟใซไฝฟ็จใใใฆใใใ้ๆณใชๆปๆใซใคใใฆใฏ่ฒฌไปปใ่ฒ ใใพใใ. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.ๅทฅๅ ทไป ็จไบๅฎๅ จๆต่ฏ๏ผไปปไฝ้ๆณๆปๅปๆฌไบบๆฆไธ่ด่ดฃ. Help root@kitploit: / /\ //\ | \ / \ | || | | \ / \ \ / / / \ / /...
Drupal-SA-CORE-2019-003
Drupal-SA-CORE-2019-003 CVE-2019-6340 Drupal SA-CORE-2019-003 CVE-2019-6340 CVE-2019-6340.md https://mp.weixin.qq.com/s/EQD4-K6HgBY9wdzeXeyzkg https://paper.seebug.org/821/ https://www.youtube.com/watch?v=QtLDDN0Duko linkname https://pbs.twimg.com/media/D0C-KiXX4AM2vR3.jpg:large CVE-2019-6340 isn...
CVE-2017-5638
CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...
CVE-2025-55182-Exploiter
๐ก๏ธ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit ๐ฅ Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities โ especially CVE-2025-55182 RSC Deserialization RCE. โ ...
CVE-2026-19410 Google Cloud Build Comment Control Bypass via Webhook Suppression
An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute unreviewed code in the build environment using webhook suppression. This vulnerability was patched on 24 June 2026, and...
CVE-2026-19410
Google Cloud Build on GCP contains an Incorrect Authorization flaw in its GitHub Trigger Comment Control feature. Prior to 24 June 2026, a remote attacker with low privileges could use webhook suppression to bypass comment-based authorization and execute unreviewed code in the build environment. ...