CVE-2025-22968

CVE-2025-22968 Vulnerabilidad de acceso no autenticado en D-Link DWR-M972V versión de software 1.05SSG Descripción El acceso no autenticado en la configuración predeterminada del D-Link DWR-M972V versión de software 1.05SSG permite que un atacante anónimo acceda al router y suba scripts malicioso...

CVE-2018-18026

CVE-2018-18026 PoC Code for CVE-2018-18026 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/malware-fighter.php...

ElfDoor-gcc

ElfDoor-gcc ElfDoor-gcc is an LDPRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code. Detailed Article: https://matheuzsecurity.github.io/hacking/gcc/ Install root@kitploit: git clone https://github.com/MatheuZSecurity/ElfDoor-gcc cd...

React2Shell-CVE-2025-55182

React2Shell-RCE-CVE-2025-55182- React2Shell | CVE-2025-55182 - React Server Components RCE...

CVE-2022-36804

CVE-2022-36804 PoC This repo contains a simple proof of concept exploit for the recent BitBucket remote code execution vulnerability CVE-2022-36804. Exploitation of this vulnerability requires access to a repository on the target instance, if you don't have creds, the target will need to have...

CVE-2025-24893-XWiki-RCE

📜 Description A critical RCE vulnerability exists in XWiki that allows unauthenticated attackers to execute arbitrary system commands via vulnerable API endpoints. Exploitation can result in: Full server takeover Data theft or destruction Pivoting into internal networks 💥 Impact Complete compromi...

CVE-2017-8759

Exploit toolkit for CVE-2017-8759 Do not be an asshole Simple tool written in C to handle the RCE vulnerability in .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7. aka ".NET Framework Remote Code Execution Vulnerability." Help root@kitploit: C:\Users\Jonas...

CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ Unauthenticated Remote Code Execution in XWiki 🛠️ PoC implementation by @dollarboysushil 💡 Overview CVE-2025-24893 is a critical RCE vulnerability in XWiki, caused by unsafe Groovy expression handling inside the SolrSearch macro. An attacker...

cve-2010-4221

cve-2010-4221 Este exploit fue escrito para estudiar algunos conceptos, ¡disfrútalo! Uso root@kitploit: Proftpd Telnet IAC remote generic exploit Writen by: F0rb1dd3n Usage: ./proftpd-exploit Attack Types: 0 - Socket Reuse 1 - Reverse Shell 2 - Bind Shell 3 - Your own shellcode raw format Solo...

CVE-2025-1094-PoC-Postgre-SQLi

Análisis de CVE-2025-1094 y Configuración de Emulación Este examen detallado, realizado el 14 de marzo de 2025, explora CVE-2025-1094, una hipotética vulnerabilidad de inyección SQL de alta gravedad en PostgreSQL, basada en la configuración de emulación proporcionada y la ejecución de la prueba d...

CVE-2021-36394-Pre-Auth-RCE-in-Moodle

CVE-2021-36394-Pre-Auth-RCE-in-Moodle Vulnerability Introduction Moodle is the most popular learning management system in the world. Start creating your eLearning website in minutes! An unauthorized remote code execution vulnerability exists in the Shibboleth authentication module of Moodle. This...

CVE-2019-11223

CVE-2019-11223 Carga Arbitraria de Archivos en el Plugin de WordPress SupportCandy Versión 2.0 e Inferiores https://cert.kalasag.com.ph/news/research/vulnerable-wordpress-plugin-lets-you-take-over-websites/ https://wordpress.org/plugins/supportcandy/developers...

CVE-2020-35846

Cockpit CMS NoSQL Injection to Remote Code Execution : CVE-2020-35846 Description Cockpit CMS has some NoSQL Vulnerabilities which can be used to dump users' information, This information disclosures can be chained together to change users' passwords and which leads to Remote Code Execution on th...

CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-

Microsoft-Windows---srv2.sys-SMB-Ejecución-de-Código-Python-MS09-050- Microsoft Windows - 'srv2.sys' Ejecución de Código SMB Python MS09-050 Exploit para CVE-2009-3103 Resumen Este script en Python es una versión actualizada de un exploit público para CVE-2009-3103. El código original dependía de...

CVE-2021-26814

CVE-2021-26814 A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager v.4.0.0-4.0.3 through the API service. To run it, simply make the .py script executable and launch it with the required parameters. root@kitploit: PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport...

CVE-2019-9193

EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in specific versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server that is vulnerable to CVE-2019-9193. Features...

propane

propane Exploits the arbitrary file write bug in ProFTPD's modcopy module CVE-2015-3306 and attempts code execution...

CVE-2013-3900-PowerShell-PoC

CVE-2013-3900-PowerShell-PoC This PoC is provided for educational and research purposes only. The author takes no responsibility for misuse or damage caused by this code. This PowerShell script is a testing tool for simulating the attack described in CVE-2013-3900. CVE-2013-3900 concerns the...

CVE-2022-26134

CVE-2022-26134 Atlassian Confluence Remote Code Execution Vulnerability CVE-2022-26134 Usage: python CVE-2022-26134.py -u http://127.0.0.1 Batch verification: python CVE-2022-26134.py -f xxx.txt copy URL to txt...

CVE-2019-0708

CVE-2019-0708 BlueKeep Currently, I public only the exploitation note for Windows 7 x64 only. See NOTE.md Note: Windows 2008 R2 with default configuration fDisableCam=1 can be exploited. Reliability is same as Windows 7. Update July 2020 Add info for Windows Server 2008 to NOTE.md Add PoCs for...