Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 References respect to the masters: CVE-2023-50386 vulnerability author's blog Java Security Manager Bypass Techniques Bypassing Reflection Protection in JDK 17 JNI Bypassing RASP Vulnerability exploitation...

log4j-finder

log4j-finder A Python3 script to scan the filesystem to find Log4j2 that is vulnerable to Log4Shell CVE-2021-44228 & CVE-2021-45046 & CVE-2021-45105. It scans recursively both on disk and inside nested Java Archive files JARs. How it works log4j-finder identifies log4j2 libraries on your filesyst...

ROOT-APP-MAVEN-CVE-2026-41717 CVE-2026-41717 in org.springframework.data:spring-data-mongodb - Patched by Root

Root has patched CVE-2026-41717 in the org.springframework.data:spring-data-mongodb package for Root:Maven. Multiple fixed versions available...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability, also known as CVE-2022-0847, is a significant flaw within the Linux kernel. This repository provides an adapted version of the widely used exploit code to make it more user-friendly and modular. A very good explanation of this...

CVE-2026-42533

NGINX Vulnerability Checker Script to non-intrusively check if an NGINX installation could be affected by vulnerability CVE-2026-42533. Important: This project does not exploit the vulnerability. It only performs local checks on the installed version and server configuration to identify potential...

HIK-CVE-2021-36260-Exploit

hikvisionbrute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/main.go -help to get help with running args run example go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt...

log4shell-vulnerable-app

Log4Shell示例漏洞应用程序（CVE-2021-44228） 本仓库包含一个存在CVE-2021-44228（别名 Log4Shell）漏洞的Spring Boot Web应用程序。 它使用了Log4j 2.14.1（通过 spring-boot-starter-log4j2 2.6.1）和JDK 1.8.0181。 运行应用程序 运行它： root@kitploit: docker run --name vulnerable-app --rm -p 8080:8080...

CVE-2024-10914-Exploit

SilverX Exploit Tool 📌 Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. ⚠️ Disclaimer This tool is for educational and...

CVE-2019-10149-quick

CVE-2019-10149-quick Simple Bash shell quick fix CVE-2019-10149...

CVE-2020-17144

weaponized tool for CVE-2020-17144Microsoft Exchange 2010 MRM.AutoTag.Model unsafe deserialize vulnerability build install .net framework 3.5 first, then make. usage root@kitploit: CVE-2020-17144 After exploit, access http://target/ews/soap/?pass=whoami to get command execution. And you can also...

CVE-2019-19781

CVE-2019-19781 Automated script for Citrix ADC scanner CVE-2019-19781 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora yum install git python3...

Next.JS-CVE-2025-29927

Next.js Vulnerability Scanner CVE-2025-29927 A security tool to detect and verify Next.js applications vulnerable to CVE-2025-29927 Authentication Bypass. Features 🎯 Accurate Next.js detection with multiple verification methods 🔍 Precise version comparison to identify vulnerable instances 🛡️...

BugHub

BugHub this is my CVEhub You can get information about these Cves by viewing the pdf and images of the project...

cve-2016-6187-poc

poc for https://duasynt.com/blog/cve-2016-6187-heap-off-by-one-exploit...

CVE-2024-31982

CVE-2024-31982 CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-31982 Installation root@kitploit: git clone https://github.com/th3gokul/CVE-2024-31982.git cd CVE-2024-31982 pip install -r requirements.txt python3 cvehunter.py --help Usage root@kitploit: python3...

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Known issues it will not work outside kali , i will update it later on : Check out CVE-2021-42287/CVE-2021-42278 Weaponisation sAMAccountName spoofing...

CVE-2026-4257

This repository does not have a README...

CVE-2017-12617

CVE-2017-12617 Code put together from a few peoples ideas credit given don't use maliciously please...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remo...

GenGravSSTIExploit

EN GenGravSSTIExploit is a PoC Python script that exploits an authenticated Server-Side Template Injection SSTI vulnerability in Grav CMS versions = 1.7.44 CVE-2024-28116. This vulnerability allows a user with editor permissions to execute OS commands on a remote server. Note : This script requir...