CVE-2024-34832

CubeCart - Directory Traversal May Lead To RCE CVE-2024-34832 TL;DR In the admin panel, parameters such as g and node are used to construct the path to include .inc.php files and execute PHP code. A malicious user with the ability to upload .inc.php files anywhere on the server can exploit a path...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

Exploitation of CVE-2015-5254 Vulnerability CVE-2015-5254 is a security vulnerability in Apache ActiveMQ, a widely used open source message broker for inter-application communication. This vulnerability affects ActiveMQ versions up to 5.13.0 and stems from the lack of filtering on incoming JMS...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE mitigations immediately. Severity: Critical. commands...

nodejshell

NODEJSHELL - Reverse shell exploit for NodeJs deserialization CVE-2017-5941 The exploit automatically generates the reverse shell payload which is encoded in decimal and then in base64. After that, this payload is sent via an HTTP POST request that serializes the user input and stores it in a...

CVE-2020-1938

CVE-2020-1938-tomcat-File Download + File Inclusion Tomcat-Ajp protocol file read vulnerability】 Source POC source: https://github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC/blob/master/poc.py After modification, it can include files, and under certain conditions, execute commands...

CVE-2024-28515

CVE-2024-28515 Description Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Information CNVD has completed verification of this vulnerability, but it has not...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

CyberPanel-RCE

CyberPanel-RCE Exploit for CyberPanel RCE found on v2.3.6 More information availabe on my blog: https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 Proof of concept Exploit RCE in Apache HugeGraph Server Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph Server. Usage 🛠 Exploit multiple targets ☣️ root@kitploit: python3 CVE-2024-27348.py -f targets.txt -c "command to execute"...

DS-Wireless-Communication-Remote-Code-Execution

Exécution de code à distance dans la communication sans fil DS Injecte du code arbitraire dans le jeu d'un client. Prérequis Python 3.10 pip pydivert Utilisation root@kitploit: pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py ID CVE CVE-2023-45887 Licence GNU...

CVE-2018-15133-PoC

CVE-2018-15133-PoC This Python script implements a remote code execution RCE exploit for vulnerable Laravel applications through insecure deserialization, based on the CVE-2018-15133 vulnerability. The exploit takes advantage of a vulnerability in Laravel versions 5.5.40 and earlier, and 5.6.0 to...

PrintNightmare

PrintNightmare Here is a project that will help to fight against Windows security breach PrintNightmare! CVE-2021-34527 You have to know that a patch has been released by Microsoft against this breach but is not fully functional and fight only RCE Remote code execution while LPE Local privilege...

cve-2019-11043

PHP Remote Code Execution Vulnerability CVE-2019-11043 1. Background On September 26, PHP officially released a vulnerability advisory pointing out that servers using Nginx + php-fpm, under certain configurations, have a remote code execution vulnerability. Moreover, this configuration is widely...

Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC for CVE-2024-30085 Proof of Concept exploit for the CVE-2024-30085 privilege escalation vulnerability. For educational and security research purposes only. ⚠️ Legal Warning FOR EDUCATIONAL USE ONLY ✅ Authorized security research ✅ Controlled laboratories ✅ Cybersecurity education ❌...

shlol

SHLOL This is a menu you can trigger with a keybind to do basic stuff for you Really easy to use Create listeners on the fly No copy pasting needed Choose the type, IP and PORT and you are done! Run remote scripts easily Reverse Shell Generator...

CVE-2018-14665

CVE-2018-14665 0x00 Introduction Indian security researcher Narendra Shinde discovered a high-risk vulnerability CVE-2018-14665 in the X.Org Server package that allows a regular account to escalate privileges to root. It affects major Linux distributions including OpenBSD, Debian, Ubuntu, CentOS,...

CVE-2019-7216

CVE-2019-7216 Dans filechucker.cgi version 5.09 et filechuckerprefs.cgi version 4.99e-free-e02, il existe un contournement du filtre, lors du téléversement, qui peut conduire à une exécution de code à distance si l'utilisateur téléverse un fichier malveillant. Le contournement se produit lorsque...

Log4j2-CVE-2021-44228

CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web root@kitploit: mvn dependency:treejava INFO | | +-...

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Check if your firewall is vulnerable to CVE-2024-21762 unauthenticated RCE For more information about the vulnerability: https://cuty.io/TKyfFh Subscribe or join my social networks for more HACKING!! Learn to detect the vulnerability and protect...