CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

Telerik_CVE-2019-18935

TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...

CVE-2025-55182

CVE-2025-55182 React2Shell CVE-2025-55182 React RCE Test Program 🔒 CVE-2025-55182 Interactive RCE Scanner This script is a vulnerability verification tool targeting CVE-2025-55182, a critical remote code execution RCE vulnerability in React 19.x's React Server Components RSC . This tool determine...

asrockploit

ejecución de código arbitrario con CVE-2020-15368...

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Lab Setup root@kitploit: docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000 Description Versions of the...

Stagefright-cve-2015-1538-1

Stagefright-cve-2015-1538-1 Discovered by Joshua J. Drake @jduck of ZIMPERIUM zLabs and fixed his project by Niranjan Shrestha @niranjanshr13. Exploit for RCE Vulnerability CVE-2015-1538 1 Integer Overflow in the libstagefright MP4 'stsc' atom handling Don't forget, the output of "createmp4" can ...

CVE-2019-7609-KibanaRCE

CVE-2019-7609-KibanaRCE Minor changes were made to the CVE to make it compatible with Python 3. cve-modific.py Here are the modifications: In the getkibanaversion function, the line match = re.findallpattern, r.content was updated to match = re.findallpattern, r.text. This change was made to use...

CVE-2025-55182

CVE-2025-55182 — React Server Components Unauthenticated RCE Severity: Critical — CVSS 10.0 CWE: CWE-502 Deserialization of Untrusted Data Vendor: Meta Facebook Disclosed: December 3, 2025 Overview CVE-2025-55182 is a maximum-severity unauthenticated remote code execution RCE vulnerability in Rea...

EUVD-2026-74044

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...

CVE-2026-66302

CVE-2026-66302 is a CRITICAL vulnerability (CVSS 9.8) in Skype for Business Server caused by external control of file name or path , allowing an unauthorized attacker to achieve remote code execution over the network with no privileges or user interaction. Affected products include Skype for Busi...

CVE-2021-39273-CVE-2021-39274

CVE-2021-39273 In XeroSecurity Sn1per 9.0 free version, insecure permissions 0777 are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges. CVE-2021-39274 In...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...

RCE-in-Spring-Cloud-CVE-2022-22963

Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: root@kitploit: $ nc -lvnp 9001 Run the exploit example with default port 9001 on...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Server-side Template Injection POC for Vmware CVE-2022-22954 Use this one line GET request!! This will execute cat /etc/passwd...

EH2-PoC

Cacti Unauthenticated Command Injection CVE-2022-46169 This is a simple PoC adaptation of the Vulnhub's Cacti scenario. You can check it out here Cacti is a robust and extensible operational monitoring and fault management framework for users around the world. A command injection vulnerability...

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

cve-2025-48384-poc

PoC for CVE-2025-48384 This proof-of-concept demonstrates Git's CR-path submodule misparsing vulnerability, leading to arbitrary hook execution during git clone --recurse-submodules. ⚠️ Warning This is for educational and testing purposes only. Do not run this on any production environment. 🧪 Usag...