CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

CVE-2018-11235-PoC

PoC exploit for CVE-2018-11235 root@kitploit: repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out...

CVE-2026-0827

CVE-2026-0827 The LdeApi.Server.exe process attempts to write MP27AM7Westimation.json to C:\ProgramData\Lenovo\LDE\SYSTEM without impersonation. This directory does not exist by default. Since C:\ProgramData\ allows standard users to create subdirectories, a low-privileged user can create this pa...

CVE-2022-0847

CVE-2022-0847 my personal poc and exploit of CVE-2022-0847dirty pipe Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: root@kitploit: $ gcc poc.c -o poc -static You shall run it as follow: root@kitploit: ./poc targetfile offsetinfile data You shal...

cve-2025-65099

Proof of Concept for CVE-2025-65099 Further details are provided in the published article. yarnPath Technique A vulnerable environment for yarnPath can be initialized as follows: root@kitploit: docker run --rm -v "$PWD":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq &&...

es_inject

CVE-2014-3120 Elastic Search Remote Code Execution This project demonstrates the CVE-2014-3120 vulnerability/misconfiguration. It allows you to read from and append to files on the system hosting ES, provided the user running ES has access to them. Notes This does not require a web server. Save i...

Dirty_Stream-Android-POC

Disclaimer This project is for educational purposes only. The author does not condone or endorse any illegal or malicious activities. The use of this exploit is solely at your own risk. The author shall not be held liable for any damages or legal consequences arising from the use of this code...

CVE-2023-35840

CVE-2023-35840 elFinder 2.1.62 - Path Traversal vulnerability in PHP LocalVolumeDriver connector Description Path Traversal vulnerability in PHP LocalVolumeDriver connector. This vulnerability can be exploited by allowing untrusted users to write to the local file system. Vulnerability exists in...

EUVD-2026-80175

The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing export files, allowing users granted its export permission to write files with arbitrary names to arbitrary locations on the server, leading to remote code execution...

CVE-2026-76550

CVE-2026-76550 affects the WP Import Export Lite WordPress plugin in versions before 3.9.34 . The root cause is a lack of validation on a user-supplied output path when writing export files, which the CVELIST entry further characterizes as a path traversal issue. Any user granted the plugin's exp...

bl_sbx

blsbx itunesstored & bookassetd Sandbox Escape This repository contains a proof-of-concept demonstrating how maliciously crafted downloads.28.sqlitedb and BLDatabaseManager.sqlite databases can escape the sandbox of itunesstored and bookassetd on iOS. By abusing their download mechanisms, the POC...

CVE-2026-40987

CVE-2026-40987: Spring Integration Remote File Synchronization Path Traversal PoC This repository is a minimal reproduction PoC for CVE-2026-40987, as disclosed in the official Spring Security Advisory. Official advisory: https://spring.io/security/cve-2026-40987/ Official title: Remote-file...

CVE-2024-3912

Why? Publishing because Mirai are a bunch of irritating twats that keep popping my honeypot with it - you're not the malware I am after. Fek off please. Here's their irritating malware distribution IP and defualt payload script. http://130.12.180.69/bins/kla.sh Description Asus router arbitrary...

Tomcat-CVE-2017-12615

Tomcat Arbitrary Write-file Vulnerability through PUT Method CVE-2017-12615 中文版本Chinese version Tomcat version: 8.5.19 Environment Setup root@kitploit: docker-compose build docker-compose up -d After successfully running the commands above, you will see the example page of Tomcat through visiting...

EventLogin-CVE-2025-29969

EventLogin - CVE-2025-29969 EventLogin is a Time-of-check time-of-use vulnerability in the MS-EVEN protocol. The vulnerability enables low-privileged users to write arbitrary files to a remote machine, effectively bypassing the need for an Administrator account for a remote write. There are two...

POC-CVE-2025-66034

fontvarlib.py — CVE-2025-66034 fontTools varLib — Arbitrary File Write + XML Injection → Remote Code Execution Table of Contents Overview Vulnerability Details Attack Chain Requirements Installation Configuration Usage How It Works Vulnerable Code Pre-Exploitation Checklist...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

CVE-2026-21440

CVE-2026-21440 Advanced detection-only PoC for CVE-2026-21440 affecting AdonisJS BodyParser. No exploitation included. CVE-2026-21440 – AdonisJS Advanced Detection PoC Description This project provides an advanced detection-only Proof of Concept PoC for CVE-2026-21440 , a critical Path Traversal ...

CVE-2021-32804

CVE-2021-32804 This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm". Environment Setup root@kitploit: docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Vulnerability...

CVE-2025-11001---7-Zip

CVE-2025-11001 - 7-Zip High-severity symlink traversal in 7-Zip allowing arbitrary file write / RCE Patched in 7-Zip 25.00 July 2025 – Public exploit available FOR AUTHORIZED SECURITY TESTING AND RESEARCH ONLY -critical Vulnerability Summary CVE : CVE-2025-11001 CVSS v3.1 : 7.0 High –...