CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...

Lenovo-CVE-2025-8061

CVE-2025-8061 is a privilege escalation vulnerability in Lenovo's LnvMSRIO.sys driver. The driver exposes IOCTL handlers that allow any user-mode process including unprivileged users to: Read/write arbitrary Model-Specific Registers MSRs Read/write arbitrary physical memory This gives a standard...

Shiro_Xray

ShiroXray Gadget root@kitploit: CommonsBeanutils1 CommonsCollectionsK1 CommonsCollectionsK2 Getshell 冰蝎 root@kitploit: import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet; import java.io.PrintWriter; import java.net.URLDecoder; import sun.misc.BASE64Decoder; public class...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

CVE-2022-36532

Prueba de concepto para CVE-2022-36532 Una vulnerabilidad en Bolt CMS versión 5.1.12 y anteriores permite que un usuario autenticado con el rol EDITORROLE logre la ejecución remota de código. Esta vulnerabilidad puede detectarse con este script; para más detalles sobre la vulnerabilidad, consulte...

Microsoft-Exchange-RCE

Microsoft-Exchange-RCE Microsoft Exchange CVE-2021-26855&CVE-2021-27065...

jscythe

jscythe abusa del mecanismo de inspector de node.js para forzar a cualquier proceso basado en node.js/electron/v8 a ejecutar código javascript arbitrario, incluso si sus capacidades de depuración están deshabilitadas. Probado y funcionando contra Visual Studio Code, Discord, cualquier aplicación...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview...

cve-2025-32433_rce_exploit

Erlang/OTP SSH – CVE-2025-32433 TryHackMe Lab ⚠️ Educational Use Only This project is strictly for learning and lab practice on the official TryHackMe room: https://tryhackme.com/room/erlangotpsshcve202532433 Do not use this tool against systems you do not own or have explicit permission to test...

spring-cve-2022-22947

spring-cve-2022-22947 Spring cloud gateway code injection : CVE-2022-22947...

CVE-2025-46816

CVE-2025-46816 POC for exploiting goshs code execution on versions 1.0.5...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2025-25620

CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored Cross-Site Scripting XSS in the "Create Assignment" function, allowing attackers to execute malicious scripts in the context of other users' sessions. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2:...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 Exploit ⚠️ DISCLAIMER - EDUCATIONAL USE ONLY This exploit is for authorized penetration testing and educational purposes only. Unauthorized access to computer systems is illegal. The author is not responsible for any misuse. 📋 Overview CVE-2021-22911 is a critical...

CVE-2023-50596

CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 es una omisión de autenticación que resulta en una fuga de información en servidores Joomla!. Aunque está clasificada como CVSSv3 5.3 gravedad media por NVD, esta vulnerabilidad podría permitir a un atacante lograr la ejecución de código en las circunstancias...

CVE-2021-43609-POC

Spiceworks Sort SQLi Hay una SQLi en un parámetro sort de Spiceworks. La cadena completa de explotación es SQLi - lectura de archivos - RCE. Demo Requisitos previos root@kitploit: apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install...

dnstake

DNSTake A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain subdomain.example.com or domain has its authoritative nameserver set to a provider e.g. AWS Route 53, Akamai, Microsoft Azure, etc...

CVE-2020-14882

CVE-2020-14882 desplegando un memory shell de Behinder Como es bien sabido, CVE-2020-14882 es una vulnerabilidad no autenticada que permite a un atacante ejecutar código arbitrario en el WebLogic Server afectado. En los PoC públicos, el acceso se logra mediante la omisión de caracteres ilegales y...

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...