CVE-2018-6574

CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...

POC-CVE-2025-55182

POC-CVE-2025-55182 credit : https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478 root@kitploit: usage: CVE-2025-55182-Exp.py -h -u URL -l LIST -c COMMAND -i --revshell LHOST LPORT -t THREADS --proxy PROXY --timeout TIMEOUT -v Usage root@kitploit: Single target exploit python3...

CVE-2025-24367

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

CVE-2024-47176

CVE-2024-47176 — Remote Command Execution in CUPS For educational and authorized penetration testing purposes only. Table of Contents Description Affected Systems Related CVEs Prerequisites Setup Usage Disclaimer Description CUPS Common UNIX Printing System is an open-source printing system that...

coreweave-demo-2026-05

CoreWeave Demo — Verified Vulnerability Journey May 2026 TL;DR for execs : see DEMO-WALKTHROUGH.md — 8-min top-to-bottom read of the full demo with sample verifier outputs, no execution required. This repository demonstrates an end-to-end verified vulnerability journey for two real-world, publicl...

CVE-2025-3248-POC

Langflow RCE Exploit - CVE-2025-3248 ⚠️ Disclaimer This code is strictly intended for educational and research purposes only. Unauthorized use on systems without explicit permission may constitute a violation of the law. The author is not responsible for any misuse or malicious activity involving...

BadBash

BadBash CVE-2014-6271 ShellShock RCE PoC tool ======= BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License : GPLv3 Orginal github project :...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

CVE-2018-6546-Exploit

CVE-2018-6546 POC Exploit This is a proof of concept exploit for version 1.27.5.0 and prior of the Plays.tv serviceplaysservice.exe. More details about the vulnerabilities can be found at: https://www.securifera.com/advisories/cve-2018-6546/...

CVE-2017-18044-Exploit

CVE-2017-18044 Native POC This is a dead simple POC for the CVE-2017-18044 command injection vulnerability in Commvault v11 SP5 and older. For metasploit users, a ruby version of the exploit is also bundled with the lastest build...

text4shell-poc

CVE-2022-42889 PoC Test Application This is a vulnerable application developed as a Proof of Concept for the vulnerability CVE-2022-42889. Maven Installation In order to run this you will need: JDK 17 or above Maven 1. Clone the git repo root@kitploit: git clone...

analysis-and-poc-n8n-CVE-2025-68613

Overview n8n and CVE-2025-68613 n8n is a workflow automation platform used to integrate systems and services through visual flows and JavaScript expressions. CVE-2025-68613 is a critical Remote Code Execution RCE vulnerability, with CVSS 9.9 , affecting multiple versions of n8n. The flaw occurs i...

CVE-2021-42013

CVE-2021-41773 / CVE-2021-42013 Apache Vulnerability Scanner A comprehensive Python-based vulnerability scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. Overview CVE-2021-41773 and...

CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripting XSS CVE-2025-25612 FS Inc S3150-8T2F prior to version S3150-8T2F2.2.0D135103 is vulnerable to Cross Site Scripting XSS in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – 通过 debug.sethook 的 Redis Lua 沙箱逃逸 程序代码（Lua + Python 触发器） root@kitploit: -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" local a = 1 end return...

CVE-2026-22006-XSLT-Server-Side-Injection-via-xsl-script-

CVE-2026-22006 – 通过 xsl:script 的 XSLT 服务端注入 程序代码（Python + XSLT） root@kitploit: xsltserver.py - Applies user-supplied XSLT to XML from lxml import etree from flask import Flask, request app = Flaskname @app.route'/transform', methods='POST' def transform: xml = request.form'xml' xslt =...

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Envenenamiento de punteros de Git LFS Cadena de suministro Código del programa Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...

React2Shell-CVE-Lab

⚛️ React2Shell: CVE-2025-55182 Vulnerable Lab ⚠️ WARNING: INTENTIONALLY VULNERABLE APPLICATION This repository contains a Dockerized application specifically configured to be vulnerable to CVE-2025-55182 React2Shell. DO NOT deploy this container in a production environment or on a public server...

CVE-2025-68613

🚀 n8n Authenticated RCE PoC Pocsuite3 CVE ID : CVE-2025-68613 Type : Authenticated Remote Code Execution Framework : Pocsuite3 This is a vulnerability verification and exploitation script based on the Pocsuite3 framework, used to detect the authenticated remote code execution RCE vulnerability in...

redis-poc

Redis 认证 RCE（stream NACK 双重释放、TDigest 与 TopK 模块漏洞） 针对 Redis 6.2.22、7.4.9、8.6.4 的非破坏性 RCE 利用，通过 stream 消费者组共享 NACK 双重释放（CVE-2026-25243 的补丁绕过）；针对 8.8.0 通过捆绑 RedisBloom 中的 TDigest 堆溢出；针对 8.8.1 通过 TopK 野指针 释放（CVE-2026-25589 的补丁绕过）。 文件 Aexploitstock.py — 针对 6.2.22 的利用（redis:6.2.22 镜像） P74exploit.py（+...