CVE-2020-1938-Clean-Version

CVE-2020-1938-Clean-Version CVE-2020-1938GhostCat clean and readable code version Me...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability allows an unauthenticated attacker to remotely execute arbitrary code on a vulnerable Confluence server. The vulnerability exists due to an improper validation of user-supplied input in the Confluence REST API. This allow...

CVE-2021-33026

CVE-2021-33026 Pickle Serialization Remote Code Execution - Memcached Poisoning PoC Exploit What's CVE-2021-3306? "The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains...

CVE-2019-8561

CVE-2019-8561 Proof of concept exploit for CVE-2019-8561 discovered by Jaron Bradley @jbradley89 Patched in macOS 10.14.4. This script exploits a TOCTOU bug in installer which enables code execution as root. See Jaron's Objective By the Sea v2 talk "Bad Things in Small Packages" where he...

CVE-2025-3776

CVE-2025-3776 - Ejecución Remota de Código en el Plugin "Verification SMS with TargetSMS" = 1.5 Información del Plugin Nombre del Plugin: Verification SMS with TargetSMS Versiones Vulnerables: = 1.5 ID CVE: CVE-2025-3776 Tipo: Ejecución Remota de Código RCE Clasificación OWASP: A1: Inyección...

EUVD-2026-68577

ProfilePress wp-user-avatar WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and activate arbitrary plugins by brute-forcing a weak 32-bit connect token via the ppressconnectprocess AJAX handler...

CVE-2024-11393

CVE-2024-11393 Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en el modelo MaskFormer de Hugging Face Transformers Resumen general y efectos de la vulnerabilidad: La vulnerabilidad permite a un atacante ejecutar código arbitrario en la máquina anfitriona a...

CVE-2025-45466

CVE-2025-45466 Son los detalles de CVE-2025-45466 Divulgación de CVE: CVE-2025-45466 Resumen Se ha descubierto una vulnerabilidad en el perro robótico Unitree Go1 todas las versiones = Go120220511 que involucra credenciales de autenticación en texto plano codificadas , lo que conduce a un Control...

CVE-2021-41773_CVE-2021-42013_Exploits

Explotando CVE-2021-41773 y CVE-2021-42013 Descripción general Este repositorio se centra en explotar dos vulnerabilidades en Apache HTTPD: CVE-2021-41773 y CVE-2021-42013. Estos CVE representan vulnerabilidades de path traversal que potencialmente pueden conducir a mapeo de archivos y ejecución...

F5-Big-IP-CVE-2022-1388

F5-Big-IP-CVE-2022-1388 CVE-2022-1388 F5 Big IP unauth remote code execution PoC Follow us Vulnmachines YouTube Twitter Facebook...

CVE-2020-0688

CVE-2020-0688 Ejecución remota de código RCE en Microsoft Exchange Server mediante clave criptográfica fija En lugar de tener claves generadas aleatoriamente por instalación, todas las instalaciones de Microsoft Exchange Server tienen los mismos valores validationKey y decryptionKey en web.config...

ClearML-CVE-2024-24590-RCE

Clearml-CVE-2024-24590 CVE-2024-24590 is a vulnerability that can be exploited when there is improper deserialization on the server side, in this case, Clearml. When an attacker creates a malicious Pickle file, they can execute arbitrary code on the victim who deserializes the Pickle file, which...

sophucked

sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth. Implemented this quickly as it was needed to unify some threat magnets. Example Use: root@kitploit: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + starting handler on port 80 + Sending callback to x.x.x.x:80 + connection from...

CVE-2011-2523-poc

CVE-2011-2523-poc This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules Requirements root@kitploit: sudo python3 -m pip install pwntools Install root@kitploit: git clone https://github.com/4m3rr0r/CVE-2011-2523-poc.g...

CVE-2024-9441

CVE-2024-9441 Descripción de la vulnerabilidad: Este código explota una vulnerabilidad de ejecución remota de código RCE que se produce debido a una sanitización inadecuada de las entradas en una aplicación web basada en PHP. La debilidad específica se encuentra en la funcionalidad de "olvidar...

CVE-2020-26217

Description XStream can be used for Remote Code Execution Influence Xstream com.thoughtworks.xstream xstream 1.4.13 How to use root@kitploit: 0 text/plain 0 -1 1...

CVE-2020-10148

Usage & Disclaimer This script is a batch detection script for the SolarWinds Orion API remote code execution vulnerability CVE-2020-10148. Usage: Python CVE-2020-10148.py urls.txt Each URL in urls.txt is on a separate line, and the vulnerable addresses are output to vul.txt. Affected versions:...

CVE-2022-21587-Oracle-EBS-

Requisitos previos para que este exploit funcione: python3 incluyendo los módulos requests, os, sys, slipit uuencode Antes de ejecutar, asegúrate de usarlo solo con fines éticos Si el exploit falla al ejecutarse: Asegúrate de haber instalado los módulos prerrequisitos instalar requests pip3 insta...