630512 matches found
CVE-2026-51992
CVE-2026-51992 Within ClickHouse, a feature exists that allows a user with the correct permissions to create dictionaries in order to interact with different databases and run specific queries on them. For PostgreSQL, SELECT queries are wrapped in a COPY QUERY TO STDOUT statement before being...
watchTowr-vs-JunosEvolved-CVE-2026-21902
watchTowr-vs-JunosEvolved-CVE-2026-21902 Detection Artifact Generator for Juniper Junos Evolved CVE-2026-21902. https://github.com/user-attachments/assets/a7d667e1-7636-4097-ab3f-838944cdcccc See our blog post for technical details. Detection in Action root@kitploit: python...
CVE-2025-48703
CVE-2025-48703 CVE-2025-48703 is a critical vulnerability in CentOS Web Panel CWP that allows unauthenticated attackers to perform remote code execution RCE by bypassing authentication and executing system commands. The vulnerability affects CWP versions 0.9.8.1204 and earlier, and has been patch...
bash-apocalypse
Bash Apocalypse Automated exploitation toolkit for CVE-2014-6271 Shellshock A complete security research project demonstrating the Shellshock vulnerability that affected millions of servers in 2014. Includes automated scanning, exploitation capabilities, and defensive recommendations. Demo What i...
React4Shell
React2Shell Exploit Prueba de concepto PoC para la vulnerabilidad de ejecución remota de código en React Server Components RSC / Next.js. Descripción Existe una vulnerabilidad de ejecución remota de código sin autenticación previa en React Server Components versiones 19.0.0, 19.1.0, 19.1.1 y...
CVE-2023-34468-PoC
CVE-2023-34468 PoC for Apache NiFi Educational proof-of-concept PoC for CVE-2023-34468 affecting Apache NiFi versions prior to 1.22.0. This repository demonstrates how abuse of H2 JDBC URL configuration can lead to authenticated remote code execution RCE in vulnerable Apache NiFi installations...
CVE-2024-48990
CVE-2024-48990 hello this is 0x3bs In victim machine: root@kitploit: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib in attacker machine to compile lib.c in attacker machine : root@kitploit: gcc -shared -fPIC -o exp.so lib.c and in vivtim machine : i...
cve-2026-0770-langflow_rce_reproduction
CVE-2026-0770: Langflow execglobals Remote Code Execution CVSS 9.8 Critical | ZDI-CAN-27325 | CWE-829: Inclusion of Functionality from Untrusted Control Sphere Overview CVE-2026-0770 is a critical unauthenticated remote code execution vulnerability in Langflow, a low-code application framework fo...
CVE-2021-42013
CVE-2021-42013 Colaborador 석은호@eunho87 CVE-2021-42013 Apache http Server Path Traversal Resumen de la vulnerabilidad Un error en el manejo de la normalización de rutas en Apache HTTP Server 2.4.50 permite leer archivos arbitrarios o ejecutar código remoto sin autenticación. Se originó debido a un...
CVE-2025-55182
CVE-2025-55182 React2Shell PoC de Exploit ⚠️ ADVERTENCIA: Este proyecto utiliza intencionalmente software vulnerable solo con fines de investigación de seguridad. Créditos Todos los créditos del PoC son para @maple3142 Configuración y Ejecución Docker root@kitploit: docker-compose up --build La...
graylog-cve-2024-24824-exploit
Exploiting Arbitrary Class Loading on the JVM This repository contains the proof-of-concept exploit presented in my talk: Exploiting Arbitrary Class Loading on the JVM Watch it here if you're interested: Youtube The exploit targets CVE-2024-24824 minor typo in the slides, an arbitrary class loadi...
CVE-2026-86218
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14...
CVE-2026-1357
CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Unauthenticated Arbitrary File Upload → RCE PoC for CVE-2026-1357 CVSS 9.8 Critical, CWE-434: an unauthenticated arbitrary file upload in the WPvivid Backup & Migration plugin for WordPress that leads to remote code execution. Fixed in 0.9.124...
GHSA-RGWJ-5XJ2-C3M3 vulnerabilities
Vulnerabilities for packages: sqlpad...
Exploit_CVE-2025-37164
ExploitCVE-2025-37164 ! This Script is made for educational purpose only Exploit for the CVE-2025-37164 Description : This script provide a simple exploit for the CVE-2025-37164 impacting HPE OneView that can be used to validate if an asset is vulnerable. usage : root@kitploit: git clone...
HTB-NanoCorp-CVE-2024-0670
CVE-2024-0670 - Escalada de Privilegios en la Reparación MSI del Agente CheckMK NanoCorp HTB Este repositorio contiene un script de PowerShell utilizado para explotar CVE-2024-0670 en la máquina NanoCorp de Hack The Box. La vulnerabilidad permite a un usuario con pocos privilegios abusar de la...
CVE-2014-6271-Shellshock-
Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demonstration Lab Shellshock CVE-2014-6271 is one of the most influential remote code execution vulnerabilities ever discovered. The flaw affects Bash and allows attackers to execute arbitrary commands simply by injecting crafted payloads in...
CVE-2025-49132-PHP-PEAR
CVE-2025-49132: Pterodactyl Panel Unauthenticated RCE via PHP PEAR Method Table of Contents Overview Vulnerability Details Technical Analysis Exploit Flow Installation Usage Examples Mitigation Disclaimer References Author Overview This repository contains a proof-of-concept PoC exploit for...
