CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer...

CVE-2021-26084

CVE-2021-26084 Prueba de concepto para CVE-2021-26084. Inyección OGNL en Webwork de Confluence Server RCE sin autenticación Descargo de responsabilidad Esto es solo con fines educativos. No soy responsable de tus acciones. Úsalo bajo tu propio criterio. Limitaciones de comandos Debido al payload,...

CVE-2022-29464-mass

WSO2 Carbon Server CVE-2022-29464 Vulnerabilidad RCE pre-autenticación CVE-2022-29464. Escrito por Chocapikk Ligeramente modificado por trhacknon Uso root@kitploit: python exploit.py -u o: root@kitploit: python exploit.py -f Zoomeye Dork CLI: root@kitploit: zoomeye search 'title:"WSO2 Management...

CVE-2026-63030-CVE-2026-60137

CVE-2026-63030 & CVE-2026-60137 — wp2shell WordPress Core Pre-Auth RCE — Route Confusion + SQL Injection chained to Remote Code Execution...

CVE-2026-42533

CVE-2026-42533 — nginx Heap Buffer Overflow PoC Exploit Pre-Authentication Remote Code Execution via Two-Pass Capture Clobbering Public PoC released 2026-07-27 — Don't wait, patch now. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Critical Type| Heap Buffer Overflow CWE-122 Affected| nginx 0.9.6 –...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Cadena de explotación de deserialización y omisión de autenticación en Telerik Report Server para CVE-2024-4358/CVE-2024-1800 Análisis técnico Un análisis de causa raíz de la vulnerabilidad se encuentra en mi blog poc Resumen ¿Versiones compatibles? Básicamente todas...

tac_plus-pre-auth-rce

tacplus Pre-Auth Remote Command Execution Vulnerability This repository contains information about a pre-auth remote command execution vulnerability in different open-source implementations of tacplus. The following two forks are affected: Shrubbery Networks tacplus Facebook tacplus However, both...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 POC Este es un script de Python que explota la vulnerabilidad de ejecución remota de código del software de inicio de sesión de Metabase. Permite ejecutar comandos arbitrarios en el servidor antes de la autenticación. Las versiones vulnerables son Metabase ope...

CVE-2023-38646

CVE-2023-38646 Metabase RCE sin autenticación 26/11/2023 Metabase open source anterior a 0.46.6.1 y Metabase Enterprise anterior a 1.46.6.1 permiten a los atacantes ejecutar comandos arbitrarios en el servidor, al nivel de privilegio del servidor. No se requiere autenticación para la explotación...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

wp2shell

wp2shell Pre-authentication remote code execution for WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Chains CVE-2026-63030 batch route confusion SQLi with CVE-2026-60137 customizer changeset re-entry to achieve unauthenticated administrator creation and OS command execution. No password cracking required...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE /terminal/ws root@kitploit: CVSS 4.0 : 9.3 CRITICAL CVSS 3.x : 9.8 CRITICAL CWE : CWE-306 Missing Authentication for Critical Function Fix : Marimo 0.23.0+ Affects : Marimo Lab / authorized testing only HTB, CTF, engagement with written scope. Table of content...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detection Artifact Generator for Oracle E-Business Suite CVE-2025-61882 See our blog post for technical details Detection in Action root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i &...

CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell — WordPress Core Pre-Auth RCE REST API batch route confusion chained with CVE-2026-60137 SQL injection TL;DR — An unauthenticated attacker can chain a WordPress REST API batch-routing bug with a SQL injection in WPQuery to reach full remote code execution on a stock...

CVE-2023-25136

POC de OpenSSH Pre-Auth Double Free CVE-2023-25136 Este repositorio contiene un script de Prueba de Concepto POC para comprobar la vulnerabilidad OpenSSH Pre-Auth Double Free CVE-2023-25136 utilizando la librería Paramiko en Python. Requisitos previos Antes de ejecutar este script POC, debes...

CVE-2026-33439

🐞 CVE-2026-33439: OpenAM Pre-Auth RCE via jato.clientSession Deserialization Human insight + AI-assisted analysis + reverse engineering + advisory → exploit First publicly shared exploit implementation for CVE-2026-33439 Unauthenticated Java deserialization vulnerability in ForgeRock OpenAM...

CVE-2026-39987

CVE-2026-39987 For Marimo 0.20.4 PoC ⚠️ This tool is intended for educational purposes and authorized security testing only. The creator is not responsible for any unauthorized or illegal use. Use at your own risk. ⚠️ Info: CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE...

cve-2019-7192-check

Comprobador de RCE root sin autenticación en QNAP CVE-2019-7192 CVE-2019-7195 Uso: root@kitploit: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Ejemplo de archivo de entrada: root@kitploit: 1.2.3.4 8080 2.3.4.5 443 Esta herramienta toma una lista de IPs y puertos d...

XSS2Shell

XSS2Shell XSS2Shell is an educational proof of concept for CVE-2026-64638 , demonstrating the impact of a pre-authentication XSS issue in vulnerable WordPress installations. With an administrator's explicit participation, the PoC captures a WordPress Application Password, publishes a temporary...