CVE-2025-32432

CVE-2025-32432 - Craft CMS Unauthenticated RCE PoC Working proof-of-concept for CVE-2025-32432 , an unauthenticated remote code execution vulnerability in Craft CMS versions up to and including 5.6.16 also affects 4.x and 3.x trees on equivalent code paths. Search keywords: CVE-2025-32432, Craft...

CVE-2026-25643

Exploit de RCE Ciega en Frigate NVR ≤ 0.16.3 CVE-2026-25643 PoC 📜 Descripción Este exploit en Python aprovecha una vulnerabilidad crítica de manipulación de configuración en las versiones de Frigate NVR hasta la 0.16.3 tanto en rutas autenticadas como no autenticadas. Al inyectar una transmisión...

CVE-2023-38646

CVE-2023-38646 Metabase Pre-Auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

CVE-2022-41082-POC

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...

CVE-2022-1388

CVE-2022-1388 Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Nuclei Template CVE-2022-1388 BIG-IP iControl REST Exposed May 06, 2022 This only verifies the presence of the API by hitting the authentication endpoint This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP...

cve-2019-7192-check

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Checker Usage: root@kitploit: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Example file input: root@kitploit: 1.2.3.4 8080 2.3.4.5 443 This tool takes a list of QNAP NASes' IPs and ports, and it tells if each devi...

react2shell-lab

React2Shell - CVE-2025-55182 Lab A comprehensive laboratory for demonstrating and testing the critical vulnerability CVE-2025-55182 in React Server Components. ⚠️ Educational Purpose Only This repository is intended for: Security research and education Understanding vulnerability mechanisms Testin...

agentic-ioc-scanner

agentic-ioc-scanner IOC scanner for agentic AI coding tools — detects Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268, and DPRK PromptMink. A detection kit for compromise of agentic AI coding assistants Claude Code, Gemini CLI, Cursor and the dependencies they pull into your repos. Eleven...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. root@kitploit: -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id"...

CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 Vulnerability Overview When Laravel's debug mode is enabled, due to the unsafe use of the filegetcontents and fileputcontents functions by Laravel's built-in Ignition component, an attacker can trigger Phar deserialization by sending malicious requests,...

CVE-2026-65883

CVE-2026-65883 — Aimy Captcha-Less Form Guard = 20.0 Campo clfgd → Recuperación XOR → unserialize → FormattedtextLogger → RCE Resumen Inyección de objetos PHP no autenticada en Aimy Captcha-Less Form Guard para Joomla. El método onCheckAnswer decodifica en base64 el campo POST clfgd controlado po...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access e Identity Manager RCE vía SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

joomla_exploits

Exploits de Joomla Este repositorio contiene artefactos de exploits de Joomla seleccionados y validados contra entornos reales de Joomla en Docker. La colección se divide según su utilidad ofensiva práctica. real-impact Exploits con impacto de seguridad directo: RCE, subida de archivos que conduc...

SiteCore-RCE-Detection

SiteCore-RCE-Detection Para la detección de RCE en Sitecore - CVE-2021-42237 RCE sin autenticación en Sitecore Experience Platform - CVE-2021-42237 Se basa en la detección de la versión de Sitecore y la respuesta cuando se realiza una solicitud a Report.ashx vulnerable mediante GET y POST. El...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

MoveIT-CVE-2023-34362-RCE

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE For a full technical description of the vulnerability and exploitation, please read our AttackerKB Analysis. Usage ruby move.rb ruby move.rb 192.168.86.111 + Starting. target='https://192.168.86.111'. + Retrieved initial session token...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 - RCE sin autenticación previa en Confluence | Inyección OGNL Instalar requisitos root@kitploit: pip3 install -r requirements.txt Ejecutar el exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python...

CVE-2025-57174

CVE-2025-57174 - Siklu EtherHaul Series - Ejecución Remota de Comandos sin Autenticación CVE-2025-57174 Ejecución Remota de Comandos sin Autenticación Versiones afectadas: Firmware 7.4.0 - 10.7.3 probablemente todas las versiones desde 7.4.0 Cómo usar root@kitploit: python3 CVE-2025-57174.py...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Desbordamiento de búfer de pila en el analizador de certificados TLS embebido Resumen Una popular librería TLS ligera simulada contiene un desbordamiento de búfer de pila al analizar extensiones de Subject Alternative Name de certificados X.509 con un campo de longitud...