CVE-2023-45878

CVE-2023-45878 Wrote this script based on the work of https://herolab.usd.de/security-advisories/usd-2023-0025/ . The exploit works by using an Arbitrary File Write exploit in Gibbon LMS 25.0.1 . This PoC will use upload a simple php cmd script, and then use that to load a powershell revshell...

SpringBreakVulnerableApp

Spring Break Vulnerable Application This is a vulnerable application to test the exploit for the Spring Break vulnerability CVE-2017-8046. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up and sheltered environment su...

sqlpad-rce-exploit-CVE-2022-0944

Exploit de RCE en SQLPad Este repositorio contiene un script de explotación para CVE-2022-0944 en SQLPad, una vulnerabilidad que permite la ejecución remota de código RCE a través del endpoint /api/test-connection. Resumen El script proporcionado exploit.py demuestra cómo explotar la vulnerabilid...

exploit-CVE-2022-24780

iTop RCE via SSTI - exploit CVE-2022-24780 iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

cve-2025-49844

CVE-2025-49844 Mi prueba de concepto personal para CVE-2025-49844, también conocido como RediShell. Compilaciones de destino compatibles: Linux x86-64, imagen Docker redis:8.2.1-alpine Linux x86-64, imagen Docker redis:8.2.1-bookworm Es un poco torpe, probablemente no tan bueno como el de Wiz...

CVE-2020-14321

Python script to exploit CVE-2020-14321 - Moodle 3.9 Course enrolments allowed privilege escalation from teacher role into manager role to RCE. Teachers of a course were able to assign themselves the manager role within that course. Payload extracted from:...

CVE-2020-36184

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. How to RCE pom.xml root@kitploit: 4.0.0 com.jacksonTest jacksonTest 1.0-SNAPSHOT...

poc-cve-2024-38396

CVE-2024-38396 and CVE-2024-38395 This PoC can e used either via a docker run or simply cat. This repository contains the docker file for vin01/escape-seq-test:cve-2024-38396. The PoC simply opens a calculator on OS X. How to run: Example 1. cat simpler-poc-title-report-code-execution.txt Example...

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download root@kitploit: git clone...

CVE-2024-38856-EXP

CVE-2024-38856-EXP root@kitploit: bash CVE-2024-23692.sh Nuclei root@kitploit: nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt or nuclei -id CVE-2024-23692 -o CVE-2024-23692-result.txt...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Telesquare TLR-2005KSH Remote Code Execution RCE An issue has been identified in Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 that may allow attackers to execute arbitrary system commands by exploiting the Cmd parameter. This vulnerability could potentially enable unauthorized...

CVE-2024-55504

CVE-2024-55504 An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS Reproduce From Terminal root@kitploit:...

winrar_CVE-2023-38831_lazy_poc

winrarCVE-2023-38831lazypoc Forma perezosa de crear un archivo winrar para probar CVE-2023-38831 Artículo que mencionó esta vulnerabilidad y la muestra: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ La versión de winrar que estaba usando es winrar 5.91.0 Tomé un archivo winrar...

MassExploit-CVE-2025-55182

CVE-2025-55182 – Escáner Masivo PoC CVE-2025-55182 también conocida como “React2Shell” es una vulnerabilidad crítica de Ejecución Remota de Código RCE en el sistema de Componentes del Servidor de React RSC. El problema ocurre porque el mecanismo de deserialización de cargas útiles HTTP para...

CVE-2023-52076-PoC

CVE-2023-52076-PoC Proof-of-concept for CVE-2023-52076, a critical path traversal and arbitrary file write vulnerability in Atril/Xreader document viewers affecting MATE Desktop environments. The script generates a crafted EPUB payload with zip-slip paths targeting either SSH configuration or...

Gitlab-CVE-2026-19478

CVE-2026-19478 — GitLab GraphQL @glintroduced Directive Injection Unauthenticated Remote Code Injection via GraphQL Directive in GitLab CE/EE — Delete Any Public Project With a Single HTTP Request A hands-on penetration testing lab that reproduces CVE-2026-19478, a critical CVSS 9.4 vulnerability...

CVE-2025-47812-poC

CVE-2025-47812-poC Exploit simple para Wing FTP Server RCE CVE-2025-47812 para ejecutar comandos y obtener una reverse shell. Solo para uso educativo. Detalles de la Vulnerabilidad Esta vulnerabilidad de seguridad fue divulgada y detallada públicamente por RCESecurity...

CVE-2025-32433

CVE-2025-32433: Erlang/OTP's SSH Server Exploit Information CVE-2025-32433: A critical flaw has been discovered in Erlang/OTP's SSH server allows unauthenticated attackers to gain remote code execution. One malformed SSH handshake bypasses authentication and exploits improper handling of SSH...

ActiveMQ-EXPtools

ActiveMQ-EXPtools Soporta la detección y explotación de vulnerabilidades de Apache ActiveMQ: CVE-2015-5254, CVE-2016-3088, CVE-2022-41678, CVE-2023-46604, CVE-2024-32114, CVE-2026-34197, CVE-2026-40466, CVE-2026-42588 !WARNING Esta herramienta es solo para fines de investigación y aprendizaje de...

CVE-2024-4577

CVE-2024-4577 Overview CVE-2024-4577 is a security vulnerability that affects PHP servers in the following versions: PHP 8.3.x 8.3.8 and earlier PHP 8.2.x 8.2.20 and earlier PHP 8.1.x 8.1.29 and earlier All versions prior to 8.0 Unsupported versions 7.x and 5.x This vulnerability is a remote code...