630840 matches found
CVE-2023-46404
CVE-2023-46404 PCRS is a webapp for online programming exercises developed at the University of Toronto. See Bitbucket repository: https://bitbucket.org/utmandrew/pcrs/src/3.11/ Summary PCRS “Questions” page with code submission and “Code editor” page are vulnerable to remote code execution RCE b...
HG532d-RCE-Exploit
HG532d RCE Exploit Overview A Remote Code Execution RCE exploit based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com to work on Huawei HG532d Home Gateway Routers. Description This RCE exploit is based on CVE-2017-17215 which exploits vulnerabilities in the UPn...
CVE-2018-6574-go-get-RCE
This repository does not have a README...
CVE-2024-4577
This is POC of CVE 2024-4577 This exploit allows attacker to perform RCE in PHP Versions such as PHP 8.3 8.3.8 PHP 8.2 8.2.20 PHP 8.1 8.1.29 Arguments you can check from code! To read more about this particular exploit check nist.gov...
CVE-2022-26134-Confluence-RCE
Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection Another exploit in OGNL Land Description Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluen...
CVE-2020-27955-LFS-main
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
bluekeep
Description This script checks multiple IP addresses for the BlueKeep vulnerability CVE-2019-0708, which is a critical Remote Desktop Protocol RDP vulnerability found in older versions of Windows operating systems. The vulnerability allows attackers to remotely execute code on a target machine...
CVE-2020-5902
CVE-2020-5902 Exploit automático RCE CVE-2020-5902 F5 BIG-IP RCE + LEER ARCHIVO Dorks : http.title:"BIG-IP®- Redirect" Usando shodan.io...
CVE-2024-3094-check
CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use root@kitploit: curl -fsSL...
cve-2018-1273
CVE-2018-1273 Spring Data Commons RCE Remote Command Execution Vulnerability usage root@kitploit: C:\Users\CTF\Desktoppython cve-2018-1273.py / / | / / /| |/ : touch /tmp/jas502n 405, May Have a CVE-2018-1273 vulnerability! CVE-2018-1273 Vulnerability Exit! Cmd : BurpSuite request: root@kitploit:...
CVE-2023-24489-poc
CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It needs a list of target.txt full of the targets you want to test in this format: https://example1.com https://example2.com https://example3.com The file must be within the same dir where the bash script is executed. Please use with caution !...
cve-2023-2523-and-cve-2023-2648
cve-2023-2523 Note: The script uploads a phpinfo file Usage: Results are automatically saved to result.txt Image Manual POC: root@kitploit: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1...
CVE-2026-87083
A flaw was found in tile-ai tilelang. This vulnerability, located in the Kernel Cache component's KernelCache.loadkernelfromdisk function, allows a remote attacker to perform deserialization. This could lead to various impacts, such as arbitrary code execution or information disclosure, by...
CVE-2026-87430
A flaw was found in WebRTC, a real-time communication component, within Google Chrome. A remote attacker could exploit this buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the...
CVE-2025-52136
CVE-2025-52136 root@kitploit: https://github.com/ricardojoserf/emqx-RCE The original exploitation method uploads an EMQX plugin and adds Erlang os module calls in the plugin template code to execute system commands for RCE. In an outbound network environment, curl is available by default, so you...
CVE-2022-24934
CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...
CVE-2023-40031
CVE-2023-40031 Analysis and Reproduction of notepad++ Heap Buffer Overflow Vulnerability CVE-2023-40031 Vulnerability Overview Notepad++ is a well-known open-source code editor that runs on Windows and supports multiple programming languages. Recently, security researchers examined Notepad++ and...
CVE-2026-87021
Tanium Comply is affected by an unauthorized code execution vulnerability. The CVSS v3.1 score is 7.2 (HIGH) , with a network attack vector, low complexity, and high privileges required , resulting in high impact on confidentiality, integrity, and availability. No user interaction is needed. Tani...
