react-ssr-vulnerability

CVE-2025-55182 - React Server Components RCE POC This is POC for educational and security research purposes only. This vulnerability has been patched in the latest versions of the affected packages. Use this tool only on systems you own or have explicit permission to test. I am not liable for any...

PoC-CVE-2019-1003030

Jenkins 2.63 Script Security Sandbox Bypass PoC This project automates the creation and delivery of Groovy payloads to the Jenkins SecureGroovyScript validation endpoint used by Jenkins 2.63. The tool supports both interactive and one-shot execution. the exploit doesn't return output so you are...

CVE-2025-14847

mongoExploit CVE-2025-14847 mongoExploit is a Proof-of-Concept PoC exploit tool for CVE-2025-14847 , a memory leak vulnerability in MongoDB. This tool exploits a bug in zlib decompression to leak server memory via BSON field names. By crafting a BSON payload with an inflated document length, it...

CS-MemoryEvasion

MemoryEvasion A Cobalt Strike memory evasion loader for redteamers,Support x86/x64 stager/stagerless payload with profiletested on windows7/10,winserver 2012 How Evasion? Hook Sleep,CreateProcessA,CreateHeap,GetProcessHeap functions before the shellcode is loaded into memory. Create a new heap fo...

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 payload builder & exploit Info / Help root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal Exploit | |...

CVE-2023-46604

CVE-2023-46604 Build a docker-compose containing 2 images: the victim machine and the target machine, according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Start an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen...

CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow

CVE 2004-2271 MiniShare-1.4.1-Buffer-Overflow https://vulners.com/cve/CVE-2004-2271 Usage in file, generates a msfvenom payload automatically because I'm lazy. Ported from: https://www.exploit-db.com/exploits/636/...

cve-2019-9978

cve-2019-9978 This is a script that allows exploiting the CVE-2019-9978 vulnerability in a straightforward manner, intended for use in Capture The Flag CTF challenges or as a proof of concept for penetration testing. Prerequisites Python 3 Requests library Install with pip install requests Usage ...

CVE-2024-54951

Monica-Stored-XSS-Vulnerability CVE-2024-54951 CVE-2024-54951 I contacted the monica development team via email on 11/20/2024. I also contacted them via LinkedIn through connection message attempt, and other platforms in the weeks that followed. Publishing here since there was no response after 3...

CVE-2022-21894-Payload-New

This is a simple example payload for CVE-2022-21894 that demonstrates how an attacker could map a second stage payload in order to be able to call EFI services. A writeup of this vulnerability can be viewed here: https://github.com/Wack0/CVE-2022-21894. The code in this repository extends the PoC...

CVE-2026-48611-EXPLOIT

CVE-2026-48611 – phpBB OAuth Account Hijacking Exploit Unauthenticated Account Takeover | CVSS 9.4 Critical | Ready to use 🔥 What you get Fully working Python exploit for CVE-2026-48611 Mass scanner — checks thousands of targets automatically CSRF payload generator — creates HTML file for account...

BadPfs-CVE-2022-4510

BadPfs Python script that generates pfs payloads to exploit CVE-2022-4510 Simply create a pfs payload using the script. When binwalk is run with -e on the payload, a file can be overwritten with the permission of binwalk. This example will overwrite /etc/sudoers with the contents of ./data when i...

react-vuln-scanner

React CVE-2025-55182 Vulnerability Scanner A bash script to scan your server for React applications vulnerable to CVE-2025-55182 — a critical remote code execution vulnerability CVSS 10.0 in React Server Components. ⚠️ About the Vulnerability On December 3, 2025, the React team disclosed a critica...

cve-2023-46604

Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 is a widely exploited vulnerability that appears on CISA's KEV list. This go-exploit implementation can execute a reverse shell on the targets using a Nashorn payload, or download a binary to the target and execute it. Compiling To build the exploit...

CVE-2025-32433-Eploit

CVE-2025-32433-Eploit Erlang/OTP SSH Vulnerable to Pre-Authentication RCE SSH Erlang RCE Exploit crafting SSH payload to execute an arbitrary Erlang command on the vulnerable server. Usage: root@kitploit: python3 exploit.py -t targets.txt -p 2222 -o results.log Disclaimer: This tool is for...

CVE-2020-35488

I have found a vulnerability in product: nxlog-ce2.10.2150. I have tested my PoC only on Linux Debian 10 and Windows Windows Server 2016. 1 Description : Scope : NXLOG Community Edition 2.10.2150 Bug Type : CWE-502, Deserialization of Untrusted Data https://cwe.mitre.org/data/definitions/502.html...

CVE-2023-23397-POC

CVE-2023-23397-POC Simple PoC for CVE-2023-23397 vulnerability, payload sent via email...

minecraft-log4j-honeypot

Minecraft Log4j Honeypot This honeypots runs fake Minecraft server 1.7.2 - 1.16.5 without snapshots waiting to be exploited. Payload classes are saved to payloads/ directory. Requirements Golang 1.16+ Running Natively root@kitploit: git clone https://github.com/Adikso/minecraft-log4j-honeypot.git...

CVE-2025-3248

中文 ｜ English Langflow Vulnerability Scanner A vulnerability scanner for CVE-2025-3248 in Langflow applications. Features Scan single target or multiple targets using FOFA Execute system commands on vulnerable targets Retrieve system information Custom payload support Progress bar for FOFA scannin...

GwisinMsi

GwisinMsi This repo contains the PoC of the MSI payload used in the blog post. The payload is based on the Gwisin ransomware's MSI payload analysis of the AhnLab ASEC team's blog post. DLL Compiling Configuration Project Project properties c/c++ preprocessor processor definition -...