276487 matches found
log4j-CVE-2021-44228
Apache Log4j Zero Day aka Log4Shell aka CVE-2021-44228 Introduction Reproducing the problem in k8s env Setting up k8s env with the vulnerability Possible Solutions KubeArmor Security Policy Not allowing any execs from the JVM/Java Default Deny based rules KubeArmor Visibility/Observability into t...
Exploit-CVE-2023-38646-Metabase
Exploit CVE-2023-38646 Metabase before 0.46.6.1 open source and before 1.46.6.1 Enterprise Exploit for the Remote Code Execution RCE vulnerability identified in Metabase versions before 0.46.6.1 open source and 1.46.6.1 Enterprise. The vulnerability allows attackers to execute arbitrary commands ...
CVE-2025-25257
Table of Contents Overview Vulnerability Details Proof of Concept PoC Trolled2 Trolled3 Overview CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. This flaw allows attackers to inject malicious SQL commands into th...
Zimbra-RCE
Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...
CVE-2024-0195-SpiderFlow
CVE-2024-0195 Improper Control of Generation of Code 'Code Injection' Summary CVE-2024-0195 is a critical code injection vulnerability in the spider-flow 0.4.3 web application, specifically in the FunctionService.saveFunction function of the FunctionController.java file. An attacker can remotely...
CVE-2017-8291
Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow is a popular image processing library for Python. It supports various image formats and provides powerful image manipulation capabilities. The Python image processing module PIL Pillow is...
watchguard_cve-2022-26318
watchguardcve-2022-26318 Watchguard RCE POC CVE-2022-26318 !/usr/bin/python3 -- coding: utf-8 - - CVE-2022-26318 import socket import ssl import gzip Remote WatchGuard XTM or FireWare OS RHOST = "1.1.1.1" Local host with nc listener: nc -l 8.8.8.8 8888 LHOST = "8.8.8.8" def buildPayloadLHOST:...
CVE-2012-2982-Exploit-Script
CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin = 1.580, targeting a known remote...
CVE-2025-55182
CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...
Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-
Project Goal: To demonstrate a complete attack chain on a vulnerable WordPress installation, exploiting CVE-2021-29447 XXE in media library to achieve remote code execution and full system compromise. Phase 1: Reconnaissance & Enumeration Network Scanning with Nmap: bash Quick SYN scan to discove...
CVE-2026-42945-NGINX-Rift-Toolkit
CVE-2026-42945 Nginx Rift Vulnerability Toolkit Comprehensive toolkit for scanning, patching, and testing CVE-2026-42945 - a critical RCE vulnerability in nginx Table of Contents Overview CVE Details Features Toolkit Components Requirements Installation Usage Workflow Examples Security...
CVE-2024-4577
This is POC of CVE 2024-4577 This exploit allows attacker to perform RCE in PHP Versions such as PHP 8.3 8.3.8 PHP 8.2 8.2.20 PHP 8.1 8.1.29 Arguments you can check from code! To read more about this particular exploit check nist.gov...
CVE-2026-44825-Apache-Solr-Scanner
CVE-2026-44825 Apache Solr Scanner This repository contains a Go-based scanner for detecting and testing Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution RCE conditions. The tool can scan a single target or a list of targets, detect...
Log4j-PoC
Proof of Concept for Log4j CVE-2021-44228 Disclaimer This project is only for educational purposes. Introduction This is a proof of concept of the log4j rce adapted from HyCraftHD. Here are some links for the CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day...
sophucked
sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth. Implemented this quickly as it was needed to unify some threat magnets. Example Use: root@kitploit: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + starting handler on port 80 + Sending callback to x.x.x.x:80 + connection from...
CVE-2024-4577-RCE-EXP
TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP and POC CVE-2024-4577-RCE-EXP CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform RCE EX...
CVE-2021-44228
CVE-2021-44228 log4shell POC log4j Scanning tool This tool will help you identify remote code execution vulnerability log4j on your systems. Requirements You will need to install httpx, subfinder, assetfinder, curl and amass in order to run the bash script. Installation 1. Simply git clone the re...
CVE-2026-3300
CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...
CVE-2024-53677
CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...