CVE-2026-48755

A flaw was found in Incus, a container and virtual machine manager. Improper validation of backup compression settings allows argument injection, leading to arbitrary file write on the host and potential command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

CVE-2026-48751

A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat produ...

CVE-2026-48750

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can cause the host to write files to arbitrary locations via a symlink, potentially leading to command execution as root on the host. Mitigation No mitigation is needed as Incus is not shipped in any Red...

CVE-2026-48749

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can use a symlink in the rootfs directory to read or write arbitrary files on the host, potentially leading to command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

CVE-2026-19042 Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

CVE-2026-19042

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user. The attack is delivered through a specially crafted URL sent via the out-of-session chat feature, requ...

CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version

CVE-2023-4596 PoC-Skript für CVE-2023-4596, ein effizientes Python-Tool, das zur Durchführung von nicht authentifizierter Remote-Befehlsausführung via beliebige Datei-Uploads erstellt wurde. Ressourcen Installation Verwendung Verwendung Installation root@kitploit: git clone...

cve-2024-43425

CVE-2024-43425 Firmware info: Nome dell'applicazione: Moodle Versione build: moodle-4.4.1 Versioni interessate: 4.4 fino a 4.4.1, 4.3 fino a 4.3.5, 4.2 fino a 4.2.8, 4.1 fino a 4.1.11 e versioni precedenti non supportate Link per il download: moodle-4.4.1 Description and Impact Gli aggressori con...

fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591 Un exploit per il bypass dell'autenticazione Fortinet FortiOS Vulnerabile Descrizione Usa questo exp; puoi bypassare l'autenticazione ed eseguire comandi UTILIZZO root@kitploit: sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 exp.py usage: exp.py -h...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 RCE autenticata di Windows Admin Center tramite WinREST/PowerShell invokeCommand. Utilizzo: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Variabili d'ambiente: root@kitploit: WACBASE - override target base URL default below WACPASS -...

CVE-2026-47323

camel-cxf-rest / camel-cxf / camel-knative-http Reproducer für Header-Injection CVE-2026-47323 Dieses Projekt demonstriert eine Message-Header-Injection in den CXF- und Knative-HTTP-Header-Filter-Strategien von Apache Camel, verfolgt als CVE-2026-47323. CxfRsHeaderFilterStrategy camel-cxf-rest,...

winrar-cve-2023-38831-poc-gen

CVE-2023-38831 Exploit-Generator Dieses Tool ist ein Python-Skript, das eine Sicherheitslücke im RAR-Dateiformat CVE-2023-38831 ausnutzt, um einen schädlichen Befehl auszuführen, wenn ein Benutzer eine Köderdatei öffnet. Der Exploit funktioniert auf WinRAR-Versionen vor 6.23. Zum Beispiel 6.22,...

CVE-2024-39306

Descrizione Questo script è un PoC per CVE-2024-39306, dove è possibile un RCE a causa di una SQL injection tramite cui un utente autenticato può eseguire comandi arbitrari su un server che esegue ChurchCRM -p -b -c Esempio: python3 CVE-2024-39306.py -u FirstLast -p Password123 -b...

CVE-2024-51378

CVE-2024-51378 Analisi della vulnerabilità CVE-2024-51378, script per la ricerca di host vulnerabili, utilizzo dell'exploit in modalità single-thread e multi-thread in Python e nuclei. L'uso degli script è consentito solo a scopo didattico su host di test. 1-CVE-2024-51378.pdf - file principale c...

watchTowr-vs-JunosEvolved-CVE-2026-21902

watchTowr-vs-JunosEvolved-CVE-2026-21902 Generatore di artefatti di rilevamento per Juniper Junos Evolved CVE-2026-21902. https://github.com/user-attachments/assets/a7d667e1-7636-4097-ab3f-838944cdcccc Vedi il nostro post del blog per i dettagli tecnici. Rilevamento in azione root@kitploit: pytho...

coldfusion-amf

coldfusion-amf Coldfusion AMF PWN root@kitploit: pwn http://localhost "nslookup burpcollab.net"...

CVE-2025-51820

CVE-2025-51820 Eine kritische Remote Code Execution RCE-Sicherheitslücke CVE-2025-51820 wurde im Shopping Portal v1.0 entdeckt. 🚨 Remote Code Execution im Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Einleitung In der heutigen digitalen Welt ist Remote Code Execution RCE nach wie vor eine...

watchTowr-vs-FortiSIEM-CVE-2025-25256

watchTowr-vs-FortiSIEM-CVE-2025-25256 Generatore di artefatti di rilevamento per FortiSIEM CVE-2025-25256 https://github.com/user-attachments/assets/1aa1040a-af34-460d-8844-1e440efa9ba1 Vedi il nostro post sul blog per i dettagli tecnici Rilevamento in azione root@kitploit: python...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Remote Command Execution Referenz: https://www.exploit-db.com/exploits/47901...

RPC-Backdoor

Emulazione di Backdoor RPC Questo progetto è un'implementazione di base di una "backdoor RPC" pensata per emulare le TTP utilizzate da alcuni gruppi. Il progetto contiene un server RPC con cinque funzioni: Eseguire un comando con cmd.exe /c e la chiamata API CreateProcess. Rubare un token ed...