CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage में प्री-ऑथेंटिकेशन रिमोट कोड निष्पादन RCE CVE-2026-66066 "KindaRails2Shell" के लिए शैक्षिक सुरक्षा अनुसंधान रिपॉजिटरी। यह रिपॉजिटरी केवल सुरक्षा अनुसंधान, भेद्यता विश्लेषण, पहचान और रक्षात्मक उद्देश्यों के लिए है। 📖 अवलोकन...

CVE-2026-52813-Gogs-RCE

CVE-2026-52813 — Gogs Path Traversal Leading to Git Hooks Remote Code Execution Defensive Analysis Security research / Blue team writeup. This repository does not contain weaponized PoC. Researchers needing reproduction should use the public PoC referenced in the official advisory. Item| Content...

moodle-rce-calculatedquestions

मूडल कैलकुलेटेड प्रश्नों में इनपुट सत्यापन का परीक्षण करने के लिए स्क्रिप्ट्स CVE-2024-43425 यह रिपॉजिटरी ब्लॉग पोस्ट वापस स्कूल - मूडल में एक दूरस्थ कोड निष्पादन भेद्यता का शोषण से संबंधित सहायक स्क्रिप्ट्स शामिल करती है, जो मूडल लर्निंग प्लेटफ़ॉर्म में एक दूरस्थ कोड निष्पादन भेद्यता का वर्णन कर...

Solr-RCE-CVE-2019-0192

Solr-RCE-CVE-2019-0192 Apache Solr में dataImportHandler के माध्यम से दूरस्थ कोड निष्पादन लक्ष्य Solr संस्करण: 1.3 – 8.2 आवश्यकताएँ: DataImportHandler सक्षम होना चाहिए, जो डिफ़ॉल्ट रूप से नहीं है। मैंने संस्करण 6.2 पर परीक्षण किया है। python python solrRCE.py...

CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress = 2.3.3 - Unauthenticated Arbitrary File Upload Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check o...

CVE-2025-22777

CVE-2025-22777 GiveWP – 기부 플러그인 및 모금 플랫폼 = 3.19.3 - 인증되지 않은 PHP 객체 주입 설명 WordPress용 GiveWP – 기부 플러그인 및 모금 플랫폼은 3.19.3을 포함한 모든 버전에서 기부 폼의 'company' 매개변수를 통해 신뢰할 수 없는 입력의 역직렬화로 인해 PHP 객체 주입에 취약합니다. 이로 인해 인증되지 않은 공격자가 PHP 객체를 주입할 수 있습니다. POP 체인이 추가로 존재하면 공격자가 서버에서 임의의 파일을 삭제하여 원격 코드 실행이 가능해집니다. 이는...

CVE-2024-52380

CVE-2024-52380 Picsmize = 1.0.0 - Unauthenticated Arbitrary File Upload Description The Picsmize plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to...

CVE-2024-50473

CVE-2024-50473 Ajar in5 Embed = 3.1.3 - अनधिकृत मनमाना फ़ाइल अपलोड विवरण: WordPress के लिए Ajar in5 Embed प्लगइन सभी संस्करणों में, 3.1.3 तक और सहित, फ़ाइल प्रकार सत्यापन की कमी के कारण मनमाना फ़ाइल अपलोड के लिए असुरक्षित है। इससे अनधिकृत हमलावरों के लिए प्रभावित साइट के सर्वर पर मनमानी फ़ाइलें...

CVE-2024-50427

CVE-2024-50427 SurveyJS: Drag & Drop WordPress Form Builder = 1.9.136 - Authenticated Subscriber+ Arbitrary File Upload Description: The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file...

CVE-2024-49607

CVE-2024-49607 WP Dropbox Dropins = 1.0 - رفع ملفات تعسفي بدون مصادقة الوصف: إضافة WP Dropbox Dropins لـ WordPress معرّضة لرفع ملفات تعسفي في جميع الإصدارات حتى 1.0 وما يشملها. هذا يتيح للمهاجمين غير المصادَق عليهم رفع ملفات تعسفية على خادم الموقع المتأثر، مما قد يتيح تنفيذ تعليمات برمجية عن بُعد...

CVE-2024-50498

CVE-2024-50498 WP Query Console body background-color: fff; color: 222; font-family: sans-serif; pre margin: 0; font-family: monospace; a:link color: 009; text-decoration: none; background-color: fff; a:hover text-decoration: und...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 Spring-Cloud-Function-SpELRCE Vulnerability Reproduction Requires Docker environment Method 1 to start the vulnerable environment root@kitploit: git clone https://github.com/RanDengShiFu/CVE-2022-22963.git;cd CVE-2022-22963;bash Start.sh Method 2 to start the...

Rainstorm

================================================================================================ BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License :...

CVE-2019-11395

CVE-2019-11395 Overview This Proof of Concept PoC demonstrates a Buffer Overflow vulnerability in MailCarrier 2.51, allowing remote attackers to execute arbitrary code via a long string. The vulnerability can be exploited using the following processes: SMTP RCPT TO POP3 USER POP3 LIST POP3 TOP PO...

CVE-2024-5084

Hash Form 9.9.1 file upload vulnerability Exploit The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for...

drupalgeddon2-CVE-2018-7600

Drupal - Drupalgeddon2 CVE 2018-7600 root@kitploit: $ python3 drupalgeddon.py -h + drupalgeddon2 CVE-2018-7600 exploit by Rafael Caria usage: drupalgeddon.py -h --url URL --command COMMAND --function FUNCTION --test --proxy PROXY ! This script exploits CVE-2018-7600 a Drupal property injection in...

GitStackRCE

GitStackRCE GitStackRCE Vulnerability CVE-2018-5955 Exploit...

CVE-2022-29464

CVE-2022-29464 Introduction Critical WSO2 vulnerability CVE-2022-29464 was found by Orange Tsai. The flaw is an unauthorised, unconstrained arbitrary file upload that enables unauthorised users to submit malicious JSP files to WSO2 servers and get Remote Code Execution RCE. Disclaimer: Educationa...

Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc Overview Vulnerability Name：Google Chrome Type Confusion Threat Type：Code Execution Exploitation Likelihood：High POC Status：Publicly Disclosed In-the-Wild Exploitation Status：Not Disclosed EXP Status：Publicly Disclosed Technical Details Status：Publicly Disclosed This...

CVE-2024-6387-Updated-x64bit

CVE-2024-6387-Updated-x64bit Private x64 RCE exploit Python for CVE-2024-6387 02.07.2024 from exploit.in The repository provides a working variant of the CVE-2024-6387 vulnerability exploit with support for real-time active shell, multithreading, entering targets from a file, and color output. 🔥...