CVE-2022-37969

CVE-2022-37969...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection Install requirements root@kitploit: pip3 install -r requirements.txt Run exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys Local Privilege Escalation A minimal proof-of-concept for CVE-2026-29923, a vulnerability in the pstrip64.sys kernel driver EnTech Taiwan PowerStrip ≤ 3.90.736 that allows an unprivileged user-mode process to escalate to NT AUTHORITY\SYSTEM. The Bug pstrip64.sys...

ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | Un novedoso escáner de seguridad web de código abierto. Nota: AWSS es el nombre anterior de ASST Introducción Las aplicaciones web se han convertido en una parte integral de la vida cotidiana, pero muchas de estas aplicaciones se...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha Monitoring Cross-Tenant RCE via Cron API Authorization Bypass A lab environment for reproducing and detecting CVE-2026-46716 , a critical vulnerability in Nezha Monitoring where the POST /api/v1/cron endpoint lacks admin privilege checks, allowing RoleMember users to achiev...

POC-CVE-2020-0796

- Affected versions - Windows 10 Version 1903 for 32-bit Systems - Windows 10 Version 1903 for ARM64-based Systems - Windows 10 Version 1903 for x64-based Systems - Windows 10 Version 1909 for 32-bit Systems - Windows 10 Version 1909 for ARM64-based Systems - Windows 10 Version 1909 for...

CVE-2023-48849

CVE-2023-48849 Прошивка Ruijie EG Series Routers версии =EG3.01B11P216 позволяет неаутентифицированным злоумышленникам удаленно выполнять произвольный код из-за некорректной фильтрации. root@kitploit: $ python3 poc.py 192.168.1.1 'id' uid=0root gid=0root $ python3 poc.py 192.168.1.1 'grep TARGET...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — Langflow Unauthenticated Remote Code Execution RCE Overview CVE ID: CVE-2026-33017 Affected Software: Langflow Vulnerable Versions: = 1.9.0 Severity: Critical Author: r3nsi15 Date: 2026 Description Langflow exposes a public flow build endpoint /api/v1/buildpublictmp/flowID/flow...

CVE-2025-4602

eMagicOne Store Manager for WooCommerce = 1.2.5 - Unauthenticated Arbitrary File Read The eMagicOne Store Manager for WooCommerce plugin exposes a remote management protocol endpoint ?connector=bridge that allows file deletion operations on the server. The authentication mechanism relies on a...

CVE-2020-1958

CVE-2020-1958 PoC CVE-2020-1958 — это уязвимость LDAP-инъекции высокой степени серьезности в Apache Druid 0.17.0. Она позволяет злоумышленнику обойти фильтр поиска LDAP и получить значения любых атрибутов LDAP пользователей, существующих на LDAP-сервере. Из официального уведомления Apache Druid:...

NGWAF

Cortafuegos de Aplicaciones Web de Nueva Generación NGWAF NGWAF es creado por@yupengfei, @zhangbosen, @matthewng y @elizabethlim. Un agradecimiento especial a@ruinahkoh por sus contribuciones en las etapas iniciales de NGWAF. NGWAF es una prueba de concepto experimental y no está listo para su us...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage root@kitploit: go run main.go -t -c Examples root@kitploit: go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t...

Log4Jolokia

Log4Jolokia Description: Python3 implementation for leveraging and exploiting Log4J MBeans over Jolokia Usage: Generic Help: root@kitploit: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target...

CVE-2025-24367

CVE-2025-24367 CVE-2025-24367 - Cacti Authenticated Graph Template RCE...

CVE-2026-39387

CVE-2026-39387 — BoidCMS Authenticated File Upload to RCE via Template Injection Description BoidCMS -l -p Arguments Flag| Description| Example ---|---|--- -u, --url| Base URL of the target BoidCMS site| http://target.com -l, --user| Admin username| admin -p, --passwd| Admin password| password123...

CVE-2020-5260

CVE-2020-5260 CVE-2020-5260 Demonstration Record When git executes a command like "git clone https://example.com", it requests the protocol "https" to store credentials for the host "example.com", and when the remote side requests authentication, it appends the returned credentials to the outgoin...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

CVE-2019-15514

CVE-2019-15514 Тип: Раскрытие информации Затронутые пользователи, версии, устройства: Все пользователи Telegram До сих пор не исправлено. brute.py — доступный эксплойт, написанный на Python. Описание Предположим, ali — хактивист. Его Telegram ID пользователя — 21788973, а номер мобильного скрыт. ...

Stompy

Stompy Una función de PowerShell para realizar timestomping en archivos y directorios especificados. La función puede modificar marcas de tiempo de forma recursiva para todos los archivos en un directorio. Cambiar marcas de tiempo para archivos o directorios individuales. Aplicar marcas de tiempo...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...