CVE-2026-42167

CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 is a Remote Code Execution in GitHub.com and GitHub Enterprise Server The vulnerability could be exploited by injecting commands into the git push command as follows : root@kitploit: git push -o '' origin master To review any exploitation of this vulnerability, ...

L4sh

Exploit RCE Log4Shell Exploit totalmente independiente que no requiere binarios de terceros. El exploit distribuye el payload a todos los encabezados HTTP registrados posibles, como X-Forwarding , Server-IP , User-Agent Uso root@kitploit: python main.py -i lhost -u http://target:targetport -c...

gxv3175-remote-code-exec

Remote code execution for Grandstream GXV3175 VOIP phone. === INSTALLATION === copy the files to the same directory structure under the metasploit top level dir === USE === in msfconsole use exploits/linux/http/grandstreamgxv3175cmdexec set RHOST 192.168.0.1 set USERNAME & PASSWORD if required...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Tiny File Manager-2.4.3 exploit A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project's Tiny File Manager = 2.4.6 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve...

php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...

Exploits

root@kitploit: This repository contains a personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits. Some of these CVE have been joined together in exploit chains for RCE, sandbox escapes a...

CVE-2026-32746

CVE-2026-32746 - telnetd LINEMODE SLC Buffer Overflow Pre-authentication remote code execution via buffer overflow in GNU InetUtils telnetd's LINEMODE SLC Set Local Characters handler. CVSS 3.1: 9.8 Critical | CWE: CWE-120, CWE-787 Overview The addslc function in telnetd/slc.c appends 3 bytes per...

CVE-2026-23744

CVE-2026-23744 Exploit to MCPJam Inspector Install libraries with: pip install -r requirements.txt - use python CVE-2026-23744 --help to info MCPJam inspector is the local-first development platform for MCP servers. The Latest version Versions 1.4.2 and earlier are vulnerable to remote code...

CVE-2026-58073-check

Veeam Service Provider Console Agent Impersonation — Patch-State Detection Script A safe, unauthenticated detector for the KB4893 vulnerabilities in Veeam Service Provider Console published 2026-08-04. It answers one question per target, before any authentication or TLS: are the KB4893 fixes...

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-22679

CVE-2026-22679: ثغرة تنفيذ كود عن بُعد غير مصادق عليها في Weaver E-cology عبر نقطة تصحيح dubboApi -critical TL;DR يحتوي Weaver E-cology 10.0 قبل الإصدار 20260312 على ثغرة حرجة لتنفيذ كود عن بُعد غير مصادق عليها في نقطة النهاية /papi/esearch/data/devops/dubboApi/debug/method. يمكن للمهاجمين حقن...

CVE-2026-44402

CVE-2026-44402 Ejecución remota de comandos completa preautenticada en Voltronic Power SNMP Web Pro 1.1 Contenido Proveedor afectado: https://voltronicpower.com/ Producto afectado: SNMP Web Pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilidad de ejecución remota de código no autenticada en el...

CVE-2020-10199

CVE-2020-10199 Anteriormente, durante una prueba de penetración PT, me encontré con que el entorno objetivo tenía desplegado Nexus Repository Manager. Pasé por algunos obstáculos, pero al final conseguí la shell. Hago un pequeño registro para poder repasarlo fácilmente en el futuro si es necesari...

CVE-2026-0770

🚀 CVE-2026-0770 – Langflow RCE execglobal PoC Remote Code Execution vulnerability in Langflow 📌 Affected Software This vulnerability affects: Langflow 🧠 Vulnerability Overview CVE-2026-0770 is a Remote Code Execution RCE vulnerability in the: root@kitploit: /api/v1/validate/code endpoint. When...

CVE-2026-33826

🚨 CVE-2026-33826: Windows Active Directory Remote Code Execution RCE 📌 General Overview CVE-2026-33826 is a critical Remote Code Execution RCE vulnerability affecting Active Directory Domain Services AD DS. The flaw resides in the way the AD service handles malformed authentication requests throu...

CVE-2026-4800-POC

CVE-2026-4800-POC Security Advisory https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; Flow Using a...