270237 matches found
CVE-2026-65008
CVE-2026-65008 ā Grav CMS 2.0.7 Authenticated RCE Proof-of-concept for CVE-2026-65008 : authenticated remote code execution in Grav CMS via unrestricted calluserfuncarray in Blueprint::dynamicData. A user with admin.pages or api.pages.write can plant a malicious form frontmatter. The payload then...
CVE-2019-0708
CVE-2019-0708-poc CVE-2019-0708 remote code execution vulnerability batch detection 3389hosts is the list of IP addresses to be detected, one per line pool = ThreadPool10 defines the custom scanning thread Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be...
WhatsRCE
WhatsRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? root@kitploit: sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRC...
CVE-2023-38646-PoC-Metabase
CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...
CVE-2019-17564
CVE-2019-17564 CVE-2019-17564 Apache Dubbo deserialization RCE video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4...
RCE-CVE-2020-5902
RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Description These attacks are targeting BIG-IP, a multi-purpose networking device manufactured by F5 Networks. BIG-IP devices can be configured to work as traffic shaping systems, load balancers, firewalls, access gateways, rate limiters, or SSL...
Nuclei-Template-CVE-2024-50379
Nuclei-Template-CVE-2024-50379 DescripciĆ³n Este template de Nuclei detecta servidores Apache Tomcat vulnerables a la condiciĆ³n de carrera TOCTOU que permite la ejecuciĆ³n remota de cĆ³digo RCE. ā Nota importante : Este template debe ser utilizado exclusivamente para fines educativos y en entornos...
CVE-2022-22963_Reverse-Shell-Exploit
CVE-2022-22963 Reverse Shell Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...
CVE-2017-7525-Jackson-Deserialization-Lab
CVE-2017-7525 Java Insecure Deserialization Lab Basic Java REST application vulnerable to Insecure Deserialization, leading to RCE. The project must be run on Java 8u45 Based on Maven with the following dependencies: jackson-databind 2.2.2 commons-collections 3.1 spring-context-support 4.3.11 Mor...
s2-048
s2-048 Exp for s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...
CVE-2026-34197
CVE-2026-34197 ā EjecuciĆ³n Remota de CĆ³digo en Apache ActiveMQ Classic a travĆ©s de la API Jolokia TL;DR Una vulnerabilidad de ejecuciĆ³n remota de cĆ³digo en Apache ActiveMQ Classic que permite a un atacante ejecutar cĆ³digo arbitrario invocando la operaciĆ³n MBean addNetworkConnectorString a travĆ©s ...
CVE-2023-24249-Exploit
CVE-2023-24249 Exploit Script Description This repository contains an exploit script for CVE-2023-24249, a critical vulnerability found in laravel-admin version 1.8.19. This vulnerability allows for arbitrary file upload, enabling attackers to execute arbitrary code via a crafted PHP file. The...
CVE-2026-34038
CVE-2026-34038: Authenticated Remote Command Injection in Coolify This repository contains documentation and analysis for CVE-2026-34038 , a critical command injection vulnerability in Coolify. Summary An authenticated remote command injection vulnerability CWE-78 in Coolify allows users with...
CVE-2019-5544_CVE-2020-3992
Scanner for SLP services CVE-2019-5544 CVE-2020-3992 Python script that implements SRVLOC/SLP protocol to scan for enabled OpenSLP services. You may find it handy while searching for systems impacted by CVE-2019-5544, CVE-2020-3992 or CVE-2021-21974 ... More info on the VMware vulnerability you m...
React2Shell-Exploit-CVE-2025-55182
š React2Shell Exploit ā CVE-2025-55182 root@kitploit: āāāāāāā āāāāāāāā āāāāāā āāāāāāāāāāāāāāāāāāāāāāā āāāāāāāāāāā āāāāāāāāāāāāāā āāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāā āāā āāāāāāāāāāāāāā āāāāāāāāāāā āāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāā āāā āāāāāāāāāāāāāā...
CVE-2025-48384
CVE-2025-48384 PoC Notes This repository was created for security education purposes. Please do not misuse it. This vulnerability requires including \r in directory names, so Linux/Unix systems are affected. The following Git versions are affected: v2.43.x series - less than v2.43.7 v2.44.x serie...
CVE-2016-2555
CVE-2016-2555 Exploit This exploit targets a SQL Injection vulnerability and an authentication weakness vulnerability in ATutor 2.2.1. By exploiting these vulnerabilities, the attacker can upload malicious code to achieve Remote Code Execution RCE on the vulnerable server. Usage root@kitploit: $...
CVE-2023-422-Chamilo-LMS-RCE
Prerequisites root@kitploit: pip install requests Information The python script uses the vulnerability CVE-2023-422 to upload a file into the server and uses that file to send a reverse shell to the netcat listener and all this can be done without being authenticated. However, you will need to...
CVE-2023-42793
About CVE-2023-42793 You will need to obtain the token first through using different exploit. However, the following exploit will allow you to obtain RCE into the Linux server as it encoded the payload in URL and sends it to the server. How to use root@kitploit: python3 ./main -t TEAMCITYTOKEN -u...
CVE-2023-27163-AND-Mailtrail-v0.53
Automatic Exploit Summary The following exploit abuses Requests Baskets v1.2.1 SSRF vulnerability to forward the internal application running at 127.0.0.1:80 to the external application at /pwned. Once the Mailtrail v0.53 application has been forwarded it will execute a reverse shell command...