CVE-2026-73705 Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary commands on the underlying operating syste...

CVE-2026-73703

CVE-2026-73703 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated adjacent attacker can inject malicious script that executes in a victim's browser within the context of the interface, requiring user in...

CVE-2026-73703 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

CVE-2024-6387-POC

Exploiting OpenSSH Vulnerability CVE-2024-6387 🚀 A Python script designed to exploit a remote code execution RCE vulnerability in OpenSSH CVE-2024-6387. This vulnerability involves a condition in the handler that can lead to arbitrary code execution, allowing an attacker to gain root access. This...

discuz-ml-rce

discuz-ml-rce Affected systems and versions: Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 Vulnerability cause: The Discuz!ML system does not filter the language parameter content received by l in the cookie, leading to string concatenation, thereby executing PHP code. The cookie field will contain an...

bypass_disablefunc_via_LD_PRELOAD

bypassdisablefunc.php has three GET options: cmd, outpath and sopath. The options are very simple, cmd is your evil command, outpath is the output file path of the command readable and writable, sopath is the absolute path of our shared object bypassdisablefuncx64.so. For example:...

CVE-2024-31835

CVE-2024-31835 Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a craftedpayload to the file name parameter. Affected Component: FlatPress CMS Admin Panel File Upload Field Fixed version: Flatpress v1.3 - will be fixed in...

code-wsl-rce

Proof of Concept for VS Code Remote WSL Remote Code Execution - CVE-2021-43907 See the blog at https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit. Also https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43907. Building 1. npm install...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf Exploit del Generador de Fuentes Variables VariaType Este repositorio contiene un exploit especializado para la máquina VariaType de Hack The Box. El exploit aprovecha una vulnerabilidad en la forma en que la biblioteca fontTools o la aplicación web maneja archivos XML...

gitbook-xss

gitbook-xss CVE-2019-19596 GitBook through 2.6.9 allows XSS via a local .md file By entering script in MD file, it can be executed by gitbook...

Fastjson-1.2.47-rce

Fastjson-1.2.47-rce version1.2.51 Remote Command Execution 1.2.24 "b":"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"rmi://localhost:1099/Exploit", "autoCommit":true Unknown version between 1.2.24-41...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. This was the first publicly-released exploit for CVE-2009-1151. Syntax root@kitploit: $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo root@kitploit...

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell thinkphp5.0.1 automatic getshell script Solves some minor issues encountered with thinkphp5.0.1, saving you the hassle of manual reproduction by building a dedicated script from scratch...

CVE-2024-21534

CVE-2024-21534: Remote Code Execution Vulnerability in jsonpath-plus =10.0.7 Summary This repository contains a Proof of Concept PoC exploit for a critical Remote Code Execution RCE vulnerability in the jsonpath-plus package, affecting versions prior to 10.0.7. The issue stems from improper input...

CVE-2026-45221 Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...

CVE-2026-45221

Konga before 2.1.0 is vulnerable to local privilege escalation via a hardcoded OpenSSL filesystem path that does not exist in default installations. On Windows , the missing directory sits in a location writable by any authenticated local user, allowing an attacker to create it and plant maliciou...

CVE-2024-43363

CVE-2024-43363 CVE-2024-43363 Exploit Script This Python script is designed to test if a Cacti instance is vulnerable to CVE-2024-43363, a Remote Code Execution RCE vulnerability caused by log poisoning. How the Vulnerability Works: root@kitploit: Log Poisoning: An attacker injects PHP code into...

CVE-2022-22965

spring4shell ⭐ a python implementation of CVE-2022-22965 that provides a prompt to the user in the style of an ssh session. the script is designed to be easy to understand and execute, with both readability and accessbility - depending on the user's choice. Designed for exploiting the vulnerabili...

CVE-2023-25581

This Python script demonstrates the exploitation of the CVE-2023-25581 vulnerability in pac4j-core. The vulnerability allows an attacker to execute arbitrary code RCE by deserializing maliciously crafted Base64-encoded data. Prerequisites Before running the script, make sure you have the followin...

day08-CISCO-fmc-sim

Day08 — Cisco FMC-style Management RCE Simulation This is a minimal, educational simulation that demonstrates the impact class of a management-plane parsing RCE inspired by CVE-2025-20265. It intentionally executes commands from crafted input for local learning only. Quickstart root@kitploit: chm...