CVE-2021-26084

CVE-2021-26084 Atlassian Confluence Pre-Auth RCE...

CVE-2020-7961-Mass

CVE-2020-7961-Mass CVE-2020–7961 Mass exploit for Script Kiddies Tested on: Kali Linux, Windows,... Requirements: apt install python3 pip3 install requests colorama Usage: python3 rce.py target url | For a single target python3 mass.py list url | For a list target Saved file to: linux.txt, win.tx...

CVE-2024-13985

CVE-2024-13985 — Dahua EIMS capturehandle.action Remote Code Execution Advisory type: Vendor-coordinated security disclosure · Active exploitation reported CVE ID: CVE-2024-13985 CNVD ID: CNVD-2024-17054 Vendor: Zhejiang Dahua Technology Co., Ltd. Product: EIMS Enterprise Information Management...

cve-2019-1096-poc

cve-2019-1096-poc Source: https://cpr-zero.checkpoint.com/vulns/cprid-2131/ https://cpr-zero.checkpoint.com/assets/attachments/cprid-2131/poc.c...

Lab-for-cve-2018-15133

Summary: MExploiting CVE-2018-15133 Deserialization Vulnerability This exploit takes advantage of a deserialization vulnerability in the Laravel Framework through 5.5.40 and 5.6.x through 5.6.29. Description Remote code execution might occur as a result of an unserialize call on a potentially...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

CVE-2022-24112

CVE-2022-24112 Apache APISIX apisix/batch-requests RCE...

CVE-2025-25706

CVE-2025-25706 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code...

CVE-2019-0708-RCE

CVE-2019-0708-RCE CVE-2019-0708-RCE We are working on a fully functional exploit join us https://discord.gg/4kc72bZ...

ecp_slap

ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...

CVE-2021-3129

CVE-2021-3129 Laravel = v8.4.2 modo debug: Ejecución remota de código CVE-2021-3129 Modificado a partir del trabajo de @crisprss en https://github.com/crisprss/LaravelCVE-2021-3129EXP, se agregaron más gadgets disponibles para explotación. Uso: root@kitploit: python3 exp.py http://127.0.0.1:8888...

CVE-2020-5902

Readme F5 BIG-IP lectura arbitraria de archivos + ejecución remota de comandos RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...

Rust_CVE-2025-55182

Herramienta de explotación CVE-2025-55182 Versión Rust Resumen del proyecto Este proyecto es una herramienta de investigación de seguridad desarrollada en Rust, dirigida a la vulnerabilidad de ejecución remota de código RCE presente en [email protected]. Esta vulnerabilidad permite a un...

CVE-2018-7600-Drupal-POC-EXP

+----------------------------------------------------------------------+ DES: by zhzyker as https://github.com/zhzyker/exphub + root@kitploit: Drupal Drupalgeddon 2 Remote Code Execution CVE-2018-7600 + +----------------------------------------------------------------------+ USE: python3 + EXP:...

Log4j-Rec-CVE-2021-44228

Log4j2 Replication Notes, For Learning Only Reference: https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce Create Executable File root@kitploit: com/example/template javac Log4jRCE.java Start Python Built-in HTTP Server root@kitploit: com/example/template python -m http.server 8888...

CVE-2021-31166

CVE-2021-31166 0x00.Descripción Esta es una prueba de concepto para CVE-2021-31166 "Vulnerabilidad de ejecución remota de código en la pila de protocolos HTTP", una desreferencia de use-after-free en http.sys corregida por Microsoft en mayo de 2021. Hasta donde sé, solo puede provocar el bloqueo...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

EUVD-2026-85879

HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by embedding malicious template syntax in a filename. Attackers can craft a filename containing a closing template...