300270 matches found
CVE-2026-73753 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...
CVE-2026-73751 Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...
CVE-2026-73751 Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 — GNU Inetutils Telnetd Authentication Bypass...
CVE-2024-30167
PoC For Atlona OME Authenticated Command Injection Disclaimer : This proof of concept is provided solely for educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. An authenticated command...
PHP-REVERSE-SHELL
PHP Reverse Shell Powerful & Stealthy This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine. ⚠️ Disclaimer This PHP reverse shell is developed strictly for educational and...
CVE-2019-2725
CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 constructor de payloads y exploit Información / Ayuda root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic...
CVE-2018-7600
Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Install required libraries with: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTION...
CVE-2017-1000486
CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 o 6.0 - Exploit de Ejecución Remota de Código Para instalar los requisitos, ejecuta: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Así se usa el exploit: root@kitploit: $ pyth...
CVE-2025-13595
CIBELES AI = 1.10.8 - Subida de Archivos Arbitraria No Autenticada El plugin de WordPress Cibeles AI en versiones 1.10.8 y anteriores contiene una vulnerabilidad de ejecución remota de código no autenticada en el archivo actualizadorgit.php. Este archivo es accesible directamente a través de HTTP...
CVE-2015-3224
CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...
CVE-2025-55182-react2shell
react2shell CVE-2025-55182 toolkit. Scanner + exploit for unauthenticated RCE in Next.js via RSC payload injection. Node.js exploit: zero dependencies. Bash scanner: checks single URLs or bulk lists. Exploit root@kitploit: Single command with output ./react2shell.mjs -t http://target:3000 -c "id"...
CVE-2026-73722
Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...
CVE-2026-73717
A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...
CVE-2026-73704
A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...
CVE-2025-23968
AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o The AI Bud plugin exposes a REST API endpoint /wp-json/ai-buddy/v1/wp/attachments that allows uploading files to the WordPress media library. The endpoint’s file logic contains file renaming functionality that triggers after file...
CNTA-2019-0014xCVE-2019-2725
CNTA-2019-0014-CVE-2019-2725 Descargo de responsabilidad: esta herramienta es solo para fines de aprendizaje y pruebas de seguridad, prohibido su uso ilegal root@kitploit: Usage:python3 weblogicrce.py url command is echo? win or linux Para análisis detallado, visite: https://icematcha.win/?p=1174...
CVE-2026-84361
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...
EUVD-2026-69608
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...
CVE-2026-84361 Composer: Perforce source URL permits P4PORT `rsh:` command execution
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...