CVE-2023-0386

README root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable...

CVE-2022-22947_Rce_Exp

CVE-2022-22947RceExp Spring Cloud Gateway Remote Code Execution Vulnerability Exp SpringCloudGatewayRCEExp-CVE-2022-22947...

CVE-2025-30208-EXP

CVE-2025-30208-EXP Vite development server arbitrary file read vulnerability CVE-2025-30208, with wide coverage, simple exploitation, and no restrictions, posing a huge threat! Fofa search syntax: root@kitploit: body="/@vite/client" Hunter search syntax: root@kitploit: web.body="/@vite/client" Ex...

usbhijacking

CVE-2017-8464 PoC Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via ...

magnus_billing_7.3.0_RCE_CVE-2023-30258

magnusbilling7.3.0RCECVE-2023-30258 There is a remote code execution vulnerability in magnus billing 7.3.0, in the parameter "democ" from the "icepay.php" resource, where you can escape the query and execute the command you want. VULNERABLE CODE root@kitploit: if isset$GET'democ' if...

dirkjanm-CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

CVE-2012-2982-Exploit-Script

CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin = 1.580, targeting a known remote...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2021-27850_POC

CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...

UPnPHostFileRead

Description Local arbitrary file read PoC exploit for the Windows UPnP Device Host service. Reads an arbitrary file in the context of LOCAL SERVICE. Tested against Windows 11 Pro build 26200.8457. Reported to Microsoft. Assessed as "not a vulnerability". How to Build 1. Clone the repository. 2...

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎 Overview: CVE-2025-47812 is a critical remote code execution RCE vulnerability affecting Wing FTP Server versions prior to 7.4.4. It was discovered by a security researcher and has been confirmed to be actively exploited in the wild. 🧱 Root...

CVE-2022-29337

CVE-2022-29337 C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2017-3078

CVE-2017-3078 Description On CVE-2017-3078 Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. Description 2 : Adobe...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux Firewall Blocklist Integration Automated malware IP blocklist for Linux servers — supports nftables and iptables+ipset 📋 Table of Contents Quick Start Overview How It Works Prerequisites Detailed Installation Configuration Usage and Verification Troubleshooting Uninstalling Licens...

CVE-2024-36401-WoodpeckerPlugin

CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

CVE-2025-69516

CVE-2025-69516 - Tactical RMM Remote Code Execution This repository contains a Python script that automates the exploitation of the CVE-2025-69516 SSTI vulnerability in Tactical RMM. It has been tested on version 1.3.1. Usage root@kitploit: python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id...

CVE-2021-43798-Grafana

CVE-2021-43798 Grafana Arbitrary File Read 1. Installation root@kitploit: pip3 install -r requirements.txt 2. Usage root@kitploit: $ python3 grafana.py -h / | \ \ / / | | | \ / \ | \ / | | || | | / | | / \ | | \ \ / / | | | | | | | | | | | || | | \ / / | | / \ | | \ V / | | || / / | || | / / | |...

CVE-2026-10520

CVE-2026-10520 Ivanti Sentry formerly MobileIron Sentry is an enterprise security gateway that proxies traffic between mobile devices and corporate backend resources: email, SharePoint, and internal web applications. It enforces Mobile Device Management MDM policies, terminates encrypted mobile...

CVE-2019-11043

CVE-2019-11043 Python exp for CVE-2019-11043 root@kitploit: You can use build environment from https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 Usage： root@kitploit: python3 main.py -u http://iptopage/index.php If you success, you will see: root@kitploit: Base status code is 200...