273067 matches found
CVE-2022-1388
CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE. root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host...
WSUS-CVE-2025-59287-RCE
WSUS-CVE-2025-59287-RCE CVE-2025-59287 is a critical CVSS 9.8 remote code execution vulnerability affecting ALL Microsoft Windows Server Update Services aka WSUS, and has been exploited in the wild. The vulnerability exploits insecure deserialization in the GetCookie endpoint, allowing...
CVE-2022-46169
CVE-2022-46169 CVE-2022-46169 is a security vulnerability found in Cacti, a network monitoring and management software. This vulnerability allows an attacker to remotely exploit the system without authentication by sending a specially crafted HTTP request. By taking advantage of this vulnerabilit...
log4shell-mitigation
Details and Mitigation Strategy for log4j2 RCE Vulnerability Visit this Youtube video for additional details. https://youtu.be/jqWdwTeGRK0 This is a quick post on the mitigation for CVE-2021-44228 Security Vulnerability aka Log4Shell and LogJam found in log4j2 Disclaimer All the information and...
CVE-2026-40048
camel-pqc FileBasedKeyLifecycleManager Unsafe Deserialization Reproducer CVE-2026-40048 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-pqc component, tracked as CVE-2026-40048. FileBasedKeyLifecycleManager reads .key files from the configured key directory...
CVE-2023-41892_PoC
CVE-2023-41892 Craft CMS PoC This repository contains proof-of-concept scripts and a local Vulhub lab for reproducing CVE-2023-41892, a pre-authenticated remote code execution vulnerability in Craft CMS. Use this project only in an authorized local lab or other systems where you have explicit...
CVE-2023-35813-PoC
Sitecore Remote Code Execution Vulnerability CVE: 2023-35813 discovered by @mwulftange CVSS Score: 9.8 Severity: Critical This is the fantastic blog post from the researchers that found it: https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/ Figure out what command you want to...
Drupalgeddon2
CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...
proofpoint-CVE-2023-0090
About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - Unauthenticated RCE CVE: CVE-2023-0090 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Proofpoint...
SQL-Injection-and-RCE_CVE-2025-57819
FreePBX RCE PoC Unauthenticated Summary FreePBX versions 15, 16, and 17 contain a Remote Code Execution RCE vulnerability caused by insufficient sanitization of user-supplied data in endpoints. An unauthenticated attacker can manipulate the database and achieve remote code execution. Exploit...
CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle
10. CVE-2026-9998 โ ๅบๅ้พ้ข่จๆบไธญ็ไธๅฎๅ จๅๅบๅๅ ๆฆ่ฟฐ ๅบๅ้พ้ข่จๆบ่็นไฝฟ็จ Python ็ pickle ๅฏนๆฅ่ชๆบ่ฝๅ็บฆไบไปถ็ๆฐๆฎ่ฟ่กๅๅบๅๅ๏ผไป่ไฝฟๆปๅป่ ่ฝๅคๆง่กไปปๆๅฝไปคใ ไธฅ้ๆง๏ผ ไธฅ้๏ผๅฎๆด่็นๅคฑ้ท๏ผ ้ข่จๆบๆจกๆไธๆผๆดๅฉ็จ root@kitploit: !/usr/bin/env python3 """ vulnerableoracle.py - Oracle node that listens to events and deserializes data unsafely. """ import pickle, socketserver,...
CVE-2026-63030-POC
CVE-2026-63030: WordPress Pre-Auth RCE Explained ๐ Read the full technical analysis first: CVE-2026-63030: WordPress Pre-Auth RCE Explained This repository contains the proof-of-concept exploit referenced in that article. Start with the blog to understand the vulnerability, limitations, and...
WEB-CLI_RCE_React2Shell
REACT2SHELL ๐ฏ Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...
CVE-2025-15467
CVE-2025-15467 Stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing. Vulnerability A stack buffer overflow exists in evpciphergetasn1aeadparams when parsing AEAD cipher parameters e.g., AES-GCM in CMS AuthEnvelopedData content. An oversized IV overflows a 16-byte stack buffer, allowing...
MassExploit-CVE-2024-4577
CVE-2024-4577 Mass Scanner & Exploit Tool This Python script automates the detection of servers vulnerable to CVE-2024-4577 , a critical vulnerability in PHP-CGI that allows remote code execution RCE through specially crafted query parameters. The tool sends a PHP payload using...
jdwp-shellifier
JDWP ๅฉ็จ่ๆฌ ๅฎๆฏไปไน๏ผ ๆญคๆผๆดๅฉ็จ่ๆฌไพๆธ้ๆต่ฏไบบๅ้ๅฏนๅคไบๆดปๅจ็ถๆ็ JDWP ๆๅกไฝฟ็จ๏ผไปฅ่ทๅ่ฟ็จไปฃ็ ๆง่ก๏ผRemote Code Execution๏ผ่ฝๅใ ๅฎๆฏๅฆไฝๅทฅไฝ็๏ผ ๅฏ๏ผๅ ถๅทฅไฝๆนๅผ็ธๅฝๆ ๅ๏ผ่ๆฌๅช้่ฆไธไธช Python 2 ่งฃ้ๅจ๏ผ root@kitploit: % python ./jdwp-shellifier.py -h usage: jdwp-shellifier.py -h -t IP -p PORT --break-on JAVAMETHOD --cmd COMMAND Universal exploitation script for JDWP by...
WHS3_vulhub
CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC ์ ์์ง@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...
Cerberus-React2Shell-Scanner-Exploit
Cerberus React2Shell - Weaponized Exploitation Framework root@kitploit: โโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโ โโโ โโโ โโโโโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโ โโโ โโโโโโโโ...
F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study
This repository does not have a README...
cve-2017-12629
README Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML...