CVE-2020-2883

what's this This project which based weblogiccmd is a poc for CVE-2020-2883. Two Gadget First: root@kitploit: ObjectInputStream.readObject PriorityQueue.readObject PriorityQueue.heapify PriorityQueue.siftDown siftDownUsingComparator com.tangosol.util.comparator.ExtractorComparator.compare...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down...

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - Unauthenticated Arbitrary File Upload CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 Critical 📝 Description The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file uploads due to...

CVE-2023-39063

CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...

CVE-2021-40222

CVE-2021-40222 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Remote Code Execution Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input o...

CVE-2023-32031

CVE-2023-32031 CVE-2023-32031 MS Exchange PowerShell backend RCE Reference https://littlepwner.github.io/posts/cve-2023-32031-ms-exchange-powershell-backend-rce/...

CVE-2017-12617

updated version of https://github.com/cyberheartmi9 CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected...

CVE-2026-59827

CVE-2026-59827 — Unsafe Deserialization of H2 Query Results in Metabase GHSA-w95f-x9v9-wv36 | CVSS 9.9 Critical | CWE-502: Deserialization of Untrusted Data Overview CVE-2026-59827 is a critical remote code execution vulnerability in Metabase, the popular open-source business intelligence and dat...

Citrix-ADC-RCE-CVE-2020-8193

Citrix ADC RCE 0x01 CreateSession request root@kitploit: POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1 Host: 192.168.3.18:9080 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/76.0.3809.132...

CVE-2020-12124

CVE-2020-12124 An implementation of a proof-of-concept for CVE-2020-12124 https://vulners.com/cve/CVE-2020-12124 root@kitploit: The following is an actualization of CVE-2020-12124, a vulnerability which exploits a command injection in the Wavlink WN530H4 router in which certain parameters are tak...

Confluence-RCE

Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy...

CVE-2024-43468

Microsoft Configuration Manager ConfigMgr / SCCM 2403 Unauthenticated SQL injections CVE-2024-43468 exploit This script exploits the CVE-2024-43468 that allows an unauthenticated attacker, with network access to a Management Point, to execute arbitrary SQL queries on the site database. As queries...

CVE-2021-44228-Log4Shell-

CVE-2021-44228-Log4Shell- Penetration testing 1. Create malicious LDAP Server using Marshalsec !/bin/bash Script: startldapserver.sh Yêu cầu: Cài đặt Java và Marshalsec https://github.com/mbechler/marshalsec LDAPPORT="1389" HTTPPORT="8000" ATTACKERIP="192.168.0.101" REVERSEPORT="5555" echo "+ Khở...

CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly assess what sorts of protections and fixes are available. Originally found by Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle had a "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" YouTube video up f...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-36804 affecting most BitBucket versions 8.3.1 See the full advisory here https://jira.atlassian.com/browse/BSERV-13438 All credit to TheGrandPew for discovery The script will automatically detect public repositories located on bitbucket...

CVE-2024-30270-PoC

This script is designed to exploit vulnerabilities in a Mailcow instance using Cross-Site Scripting XSS and Remote Code Execution RCE. The script aims to: Inject an XSS payload into a Mailcow web interface. Use the XSS payload to execute unauthorized actions. Achieve RCE by overwriting a server...

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Unauthenticated Remote Command Injection. Overview This repository contains a Proof of Concept PoC reverse shell script for exploiting CVE-2022-36553, a critical vulnerability in Hytec Inter HWL-2511-SS devices. The script is a practical demonstration,...

cve-2023-30253

CVE-2023-30253 Description Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data. Documentation CVE-2023-30253 GitHub Advisory: GHSA-9wqr-5jp4-mjmh Setup root@kitploit: git clone...

exim-rce-cve-2018-6789

Exim RCE CVE-2018-6789 Learning Environment Description This is a set of files, scripts, notes, ... to set up an environment to investigate the Exim RCE CVE-2018-6789. It can be used to debug Exim, write exploits, trace Exim function calls, learn about Exim's custom memory management storeblocks,...

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

CVE-2019-11043 1. Vulnerability Description When Nginx processes requests containing %0a with fastcgisplitpathinfo, it causes PATHINFO to be empty due to the newline character \n. PHP-FPM has a logic flaw when handling an empty PATHINFO. An attacker can craft a request to achieve remote code...