629912 matches found
acunetix_0day
Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with root@kitploit: dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploi...
EUVD-2026-71635
Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...
CVE-2026-85654
Amazon awslabs.dynamodb-mcp-server contains a code injection vulnerability in its CDK generator component. The root cause is improper neutralization of special elements used in a template engine , allowing a context-dependent actor to execute arbitrary code on the host that deploys the generated ...
CVE-2022-23642
PoC for Sourcegraph Gitserver 3.37.0 RCE CVE-2022-23642 Sourcegraph prior to 3.37.0 has a remote code execution vulnerability on its gitserver service. This is due to lack of restriction on git config execution thus "core.sshCommand" can be passed on the HTTP arguments which can contain arbitrary...
spark-exploit
Arbitary Code Execution in Unsecured Apache Spark Cluster How to Exploit Follow the below steps: root@kitploit: $ git clone https://github.com/akhld/spark-exploit.git $ cd spark-exploit Remote Code Execution Open exploit.scala, Replace the following code with whatever you want to get executed!...
CVE-2024-4577
CVE-2024-4577 - PHP-CGI Argument Injection RCE | | ---|---|--- CVE| Description| CVSSv3 CVE-2024-4577| PHP-CGI Argument Injection Vulnerability| 9.8 | | "CVE-2024-4577 is a critical argument injection vulnerability in PHP that can be exploited to achieve remote code execution RCE. According to...
Apache-OFBiz-Exploit
Apache-OFBiz-Exploit Exploit for Apache OFBiz CVE-2024-38856 By: Alisson Faoli Description This repository contains an exploit for the CVE-2024-38856 vulnerability found in Apache OFBiz. The flaw allows Unauthenticated RCE Remote Code Execution. Note: This exploit is provided for educational and...
CVE-2025-2783
CVE-2025-2783 Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation, and logging. Safe for red team demos, detection engineering, and educational use. This project simulates a safe and educational...
VertXploit
VertXploit Exploiting HID VertX and EDGE access control systems Summary VertXploit is a tool that can be used to exploit HID VertX and EDGE access control systems. A vulnerability exists within the discoveryd service, which fails to sanitize user data before executing system calls. This allows fo...
CVE-2021-27928
Information root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep...
CVE-2019-5420
CVE-2019-5420 Ruby-on-Rails offers three different environments it can run in: development, test and production. You should obviously not have code running in development or test available on the internet but it as always happens for example in staging environments. Ruby-on-Rails uses...
SCAT
SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...
FlaskCache_CVE-2021-33026_POC
Pickle Serialization Remote Code Execution - Redis Poisoning PoC Exploit Check redis server up and running redis-cli -h 127.0.0.1 -p 6379 ping redis-cli keys redis-cli get Keyid Start listening netcat at port 10001 : nc -nvlp 10001 Setting environments for Flask Chache python -m venv venvflaskcac...
CVE-2026-16826
CVE-2026-16826 affects the Debug Server component of IBM i versions 7.3, 7.4, 7.5, and 7.6. The root cause is CWE-78 (OS Command Injection) : improper neutralization of special elements used in an OS command, allowing a local attacker with low privileges to execute arbitrary commands . NVD scores...
EUVD-2026-71485
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-71467
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-17499
CVE-2026-17499 affects the Debug Server component of IBM i versions 7.3 through 7.6. The vulnerability is an OS command injection (CWE-78) caused by improper neutralization of special elements, allowing a local attacker with low privileges to execute arbitrary commands. The impact is rated MEDIUM...
CVE-2026-17499 IBM i is Affected By Multiple Vulnerabilities in Debug Server
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
