CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP — a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...

cve-2019-14220

Summary An unprotected method in a bstutils service in BlueStacks 4.120 and below on Mac and 4.110 and below on Winodws allows a local attacker to read the contents of arbitrary files with system privileges. Description BlueStacks is an Android emulator available for Windows and Mac systems. It...

CVE-2007-2447

CVE-2007-2447 PoC: Samba "usermap script" remote command-execution historical CVE. This repository contains a small proof-of-concept script for research and educational review. The primary script is usermapscriptCommandExecution.py. Reference writeup:...

CVE-2022-29072

CVE-2022-29072 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the HelpContents area. Uncertainty There is quite a bit of uncertainty regarding this CVE in the public. The NIST vuln details has placed a status of...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

FBI Probes Service Selling 153M+ Drivers Licenses

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphonin...

CVE-2022-35914

CVE-2022-35914 PoC References https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Credit to Sébastien Copin for the PoC I adapted here Check out my full writeup here: https://link.medium.com/tBwDlpQl3Ib Usage root@kitploit: pi...

CVE-2018-6574

CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...

POC-CVE-2025-55182

POC-CVE-2025-55182 credit : https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478 root@kitploit: usage: CVE-2025-55182-Exp.py -h -u URL -l LIST -c COMMAND -i --revshell LHOST LPORT -t THREADS --proxy PROXY --timeout TIMEOUT -v Usage root@kitploit: Single target exploit python3...

heartbleed-poc

HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...

heartbleed-poc

مختبِر ومستغل HeartBleed ملاحظة: جميع الأدوات تقريبًا nmap, metasploit, nessus, وحتى burp لديها أحدث إصدارات ماسحاتها الضوئية. صدرت هذه الأدوات في المراحل المبكرة عندما كانت الأدوات لا تزال قيد التطوير. لذا استخدم تلك الأدوات بدلاً من هذه الآن. دليل الأدوات إذا كنت تريد الفحص الجماعي، فإن سكربت...

CVE-2024-47176

CVE-2024-47176 — Remote Command Execution in CUPS For educational and authorized penetration testing purposes only. Table of Contents Description Affected Systems Related CVEs Prerequisites Setup Usage Disclaimer Description CUPS Common UNIX Printing System is an open-source printing system that...

CVE-2023-0861-POC

Analyzing and Reproducing the Command Injection Vulnerability CVE-2023-0861 in NetModule Routers NetModule is an Original Equipment Manufacturer OEM of industrial grade routers that are commonly used in critical infrastructure and industrial control systems. On February 24th, 2023, ONEKEY, a...

CVE-2023-24488

CVE-2023-24488 POC for CVE-2023-24488 Citrix Gateway Open Redirect and XSS CVE-2023-24488 URL query parameters are not adequately sanitised before they are placed into an HTTP Location header. An attacker can exploit this to create a link which, when clicked, redirects the victim to an arbitrary...

BadBash

BadBash CVE-2014-6271 ShellShock RCE PoC tool ======= BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License : GPLv3 Orginal github project :...

CVE-2017-18044-Exploit

CVE-2017-18044 Native POC This is a dead simple POC for the CVE-2017-18044 command injection vulnerability in Commvault v11 SP5 and older. For metasploit users, a ruby version of the exploit is also bundled with the lastest build...

citrixInspector

CVE-2023-3519 Inspector The cve20233519inspector.py is a Python-based vulnerability scanner for detecting the CVE-2023-3519 vulnerability in Citrix Gateways. It performs a passive analysis and fingerprinting of target websites to assess their vulnerability based on a series of checks. Recent...

CVE-2024-27518

CVE-2024-27518 - SUPERAntiSpyware Professional X LPE PoC This vulnerability was discovered and disclosed by M. Akil Gündoğan from Secunnix Vulnerability Research Team. This repository will hold the proof-of concept and advisories. Details: Product: SUPERAntiSpyware Professional X and all editions...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook Program Code Lua + Python trigger root@kitploit: -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" loc...

CVE-2024-29895

CVE-2024-29895 Cacti CVE-2024-29895 POC A command injection vulnerability allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. https://github.com/Cacti/cacti/security/advisories/GHSA-cr28-x256-xf5m Usage: app -m http://site.com/ -c...