CVE-2025-10230

CVE-2025-10230 PoC for CVE-2025-10230 - Samba WINS hook command injection The configuration required for this vulnerability probably affects 0 people. The injection is limited to 15 characters and must be a valid WINS name so no ;...

CVE-2022-30525

CVE-2022-30525 Vulnerabilidad de inyección remota de comandos en el firewall de Zyxel CVE-2022-30525 Argumentos opcionales: -h, --help show this help message and exit -u url, --url url URL objetivo, p. ej.:"http://127.0.0.1" -f file, --file file Objetivos en archivo, p. ej.:"ip.txt" Uso python3...

CVE-2021-36749

CVE-2021-36749 Apache Druid LoadData Arbitrary File Read Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized attacks on websites are prohibited. Online reading of...

PrivescCheck v2026.09.02-1

PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...

explotacion-vsftpd-nmap_Laboratorio_1

🔐 Security Lab - Unit 1 📝 Lab Statement Name: Exploitation of vulnerable services Objective: Identify, analyze, and exploit a vulnerable service in a controlled lab environment using reconnaissance and exploitation tools. Instructions: 1. Identify a vulnerable service on a target machine. 2...

CVE-2025-49113

CVE-2025-49113 Roundcube Exploit A Python exploit for CVE-2025-49113, targeting a vulnerability in Roundcube webmail that allows remote code execution through PHP object deserialization. Overview This exploit leverages a deserialization vulnerability in Roundcube's file upload functionality. It...

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script que explota la vulnerabilidad del servicio ProFTP 1.3.5 con CVE-2015-3306 Uso .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

CVE-2024-4701-POC

CVE-2024-4701-POC POC for CVE-2024-4701 Download the genie docker file from https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml or this repo run docker-compose up Download the attached http payload loadlib Run the following command nc -w 5 localhost 8080 loadlib You may need to...

CVE-2026-31431

CVE-2026-31431 — Local Privilege Escalation via AFALG 2026-04-29 — I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: root@kitploit: musl-gcc -static -Os -o exploit...

CVE-2026-65008

CVE-2026-65008 — Grav CMS 2.0.7 Authenticated RCE Proof-of-concept for CVE-2026-65008 : authenticated remote code execution in Grav CMS via unrestricted calluserfuncarray in Blueprint::dynamicData. A user with admin.pages or api.pages.write can plant a malicious form frontmatter. The payload then...

CVE-2026-8206

CVE-2026-8206 Vulnerabilidad: Toma de control de cuenta no autenticada — Secuestro del correo de restablecimiento de contraseña en Kirki Customizer Framework CVSS v3.1 9.8 / 10.0 CRÍTICA Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 1. Resumen CVE-2026-8206 es una vulnerabilidad de Toma de control...

CVE-2019-0708

CVE-2019-0708-poc CVE-2019-0708 remote code execution vulnerability batch detection 3389hosts is the list of IP addresses to be detected, one per line pool = ThreadPool10 defines the custom scanning thread Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be...

WhatsRCE

WhatsRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? root@kitploit: sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRC...

CVE-2023-38646-PoC-Metabase

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212- Download files from my repostry using git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git now to set docker image Creating docker image use the command sudo docker build -t work . To...

RCE-CVE-2020-5902

RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Description These attacks are targeting BIG-IP, a multi-purpose networking device manufactured by F5 Networks. BIG-IP devices can be configured to work as traffic shaping systems, load balancers, firewalls, access gateways, rate limiters, or SSL...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Description This Nuclei template detects Apache Tomcat servers vulnerable to the TOCTOU race condition that allows remote code execution RCE. ⚠ Important note : This template should be used exclusively for educational purposes and in controlled environments with...

CVE-2026-54161

CVE-2026-54161 PoC Summary upsmon interpolates the server-supplied, attacker-controllableups.alarm value, unsanitized, into a shell command that it runs via system. When a monitored device reports an ALARM state and the operator has configured NOTIFYCMD with EXEC on the ALARM event, an ups.alarm...

CVE-2018-6574

CVE-2018-6574 POC POC de exploit para CVE-2018-6574 Compilar 1. Crea un archivo de exploit con lo siguiente: root@kitploit: include include static void malicious attributeconstructor; void malicious system"COMMAND"; 2. Compílalo: root@kitploit: gcc -shared -o exploit.so -fPIC exploit.c 3...

CVE-2014-6271

CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. 📝 Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...