CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

CVE-2018-14324-Exploit

Hackeando Eclipse GlassFish - CVE-2018-14324 La descripción de CVE-2018-14324 no explica completamente el impacto de esta vulnerabilidad. En resumen, tienes acceso a Java Management Extensions JMX mediante credenciales hardcodeadas admin:admin. Si bien el impacto se enumera como " información...

cve-2019-7609

CVE-2019-7609 Exploit for CVE-2019-7609 written in python3.6+ based on the code by LandGrey. CVE-2019-7609 : RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer. Usage 1. Start a listener 2. Run the exploit with the target url base url of the kiba server, the listener host...

CVE-2024-4040

CVE-2024-4040 Una vulnerabilidad de inyección de plantillas del lado del servidor en CrushFTP en todas las versiones anteriores a 10.7.1 y 11.1.0 en todas las plataformas permite a atacantes remotos no autenticados leer archivos del sistema de archivos fuera del VFS Sandbox, eludir la autenticaci...

GTRS

GTRS - Google Translator Reverse Shell This tools uses Google Translator as a proxy to send arbitrary commands to an infected machine. root@kitploit: INFECTED MACHINE ==HTTPS== GOOGLE TRANSLATE ==HTTP== C2 Environment Configuration First you need a VPS and a domain, for the domain you can get a...

Form-Tools-3.1.1-RCE

Form-Tools-3.1.1-RCE CVE-2024-22722 RCE via SSTI Automation with Python. Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application. This script automates the creation of ...

FakeImageExploiter

FakeImageExploiter v1.4 - backdoor images.jpg.ps1 root@kitploit: CodeName: Metamorphosis Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 Legal Disclamer: root@kitploit: The...

CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

CVE-2024-30088__Windows-TOCTOU-exploit

CVE-2024-30088 – PoC adaptado para WinRM 📌 Resumen Esta es una versión modificada del exploit original CVE-2024-30088, adaptada para funcionar en entornos no interactivos WinRM. El PoC original inicia un cmd.exe interactivo, que no funciona a través de WinRM. Esta versión se centra en la ejecució...

CVE-2020-8158

CVE-2020-8158: TypeORM Prototype Pollution Vulnerability Overview This is a proof-of-concept demonstrating CVE-2020-8158, a critical prototype pollution vulnerability in TypeORM versions 0.2.25. Vulnerability Details CVE ID : CVE-2020-8158 CVSS Score : 9.8 CRITICAL Affected Package : TypeORM 0.2....

CVE-2025-27480

CVE-2025-27480 CVE‑2025‑27480 – Ejecución remota de código en OpenSSH De qué trata la vulnerabilidad La versión 8.9p1 de OpenSSH contiene un sutil error de desbordamiento de búfer que ocurre cuando analiza un paquete SSHUSERAUTH. Un cliente puede enviar un paquete con un campo “user” muy largo, y...

CVE-2026-39987-Poc

CVE-2026-39987-Poc Cliente WebSocket de Prueba de Concepto PoC para CVE-2026-39987 Marimo Pre-Auth RCE, destinado a pruebas de seguridad autorizadas. ⚠️ Descargo de responsabilidad Este script/herramienta se proporciona únicamente con fines educativos, de investigación y de pruebas autorizadas...

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number Example: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

cve-2014-7920-7921_update

cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...

CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform contains an SSTI vulnerability, resulting in arbitrary code injection for all users that have access to editing a form submission title. Vulnerable versions are v5.0.0 test % set form = freeform.form'pentest' % % if form % form.render % else % Form not foun...

CVE-2023-45878

CVE-2023-45878 Escribí este script basándome en el trabajo de https://herolab.usd.de/security-advisories/usd-2023-0025/ . El exploit funciona mediante una vulnerabilidad de Arbitrary File Write en Gibbon LMS 25.0.1 . Este PoC subirá un simple script php cmd, y luego lo usará para cargar una rever...

CVE-2025-6586

Download Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu 1500 qdisc...