freeswitch_rce

version: !1https://assets.kitploit.com/production/public/readmes/26769/65a2d4b4b9b040b96740cd66aee81ea...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2020-15148-bypasses

CVE-2020-15148-bypasses Several bypasses for CVE-2020-15148 Yii2 deserialization poc1 This one is exploitable in version 2.0.37, fixed in 2.0.38, which was assigned CVE-2020-15148. The following three are bypasses. checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction...

CVE-2025-59287-WSUS-2

CVE-2025-59287 ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. CVE-2025-59287 is a critical remote code execution vulnerability in Microsoft Windows Server Update Services WSUS. It stems from unsafe deserializatio...

CVE-2024-48705

Overview During recent security research for the Wavlink AC1200 Model: WL-WN532A3 a Post-Authentication Command Injection Vulnerability was identified in the "/cgi-bin/adm.cgi" endpoint. This vulnerability could enable malicious actors who have compromise the credentials for the router, to run...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Unauthenticated remote code ex...

CVE-2026-32238_RemoteCodeExecutionOpenEMR8.0.0

CVE-2026-32238 - Remote Code Execution in OpenEMR Weakness CWE-78 : Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize...

CVE-2026-113345

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution...

cve-2019-9978

cve-2019-9978 This is a script that allows exploiting the CVE-2019-9978 vulnerability in a straightforward manner, intended for use in Capture The Flag CTF challenges or as a proof of concept for penetration testing. Prerequisites Python 3 Requests library Install with pip install requests Usage ...

CVE-2019-16278

CVE-2019-16278 Remote Command Execution Exploit Script for Nostromo Web Server Introduction A remote command execution vulnerability caused by directory traversal. Similar to CVE-2011-0751, the filtering is not strict, allowing bypass using %0d. Affected Versions nostromo = 1.9.6...

CVE-2026-116189

A flaw was found in rclone. A remote attacker with the ability to tamper with the release distribution path can bypass cryptographic signature verification during the self-update process. By prepending an unsigned checksum before the signed checksum block, the attacker can cause the application t...

CVE-2015-6967

CVE-2015-6967 An exploit for the Nibbles manager version 4.0.3. This exploit allows RCE to be performed. Requirements optparse, signal, requests Usage python3 CVE-2015-6967.py --url http://10.129.156.150/ --username admin --password nibbles + Login Succesfuly! + Uploading shell... Shell has been...

cve-2025-1550

cve-2025-1550 keras model json rce...

CVE-2023-27524-POC

CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is vulnerable to CVE-2023-27524 and if it is vulnerable then, forge a session cookie with the userid = 1 which is usually the admin user allowing for authentication bypass and gaining access to the dashboard...

CVE-2022-1329

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution Ngày: 16 tháng 4 năm 2023 Khai thác Tác giả: Việt Hùng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://elementor.com/ Link phần mềm: https://wordpress.org/plugins/elementor/advanced/ kéo xuống chọn phiên...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC for the deserialization vulnerability in the Flight protocol of React Server Components. What is it? Next.js 14+ and React 19 use a proprietary protocol "Flight" to communicate between client and server. The problem: the server loads any module without...

smb-usermap

Samba "username map script" Command Execution This module exploits a command execution vulnerability in Samba versions 3.0.20 through 3.0.25rc3 when using the non-default "username map script" configuration option. By specifying a username containing shell meta characters, attackers can execute...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

CVE-2019-12725-modified-exp

CVE-2019-12725-modified-exp Modified to fix errors and execute commands with higher priviliege, also removed the sleep13 in the original script to save time. references: https://www.modb.pro/db/120391 https://www.exploit-db.com/exploits/49862...

CVE-2025-66678

CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution. PoC Detail The PoC will swap the primary token of the current process to become...