Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution 利用CVE-2016-2098漏洞的脚本，该漏洞允许在Ruby 2.3.8中执行远程代码。 用法 ./RubyOnRailsActionPackInlineERB-RemoteCodeExecution.py -h --target-host TARGETHOST --port PORT --target-uri TARGETURI --target-param TARGETPARAM --payload PAYLOAD...

CVE-2012-2982

CVE-2012-2982 John Hammond | 2021年9月4日 检查 searchsploit 对于 Webmin 1.580，我只看到了一个 Metasploit 模块，用于对该旧版 Webmin 版本进行 /file/show.cgi 远程代码执行攻击。 这段代码尝试用 Python 重新实现该攻击，而无需使用 Metasploit。 文件 CVE-2021-2982.py - 该脚本提供了一次性执行单个命令的能力。...

CVE-2022-35914

针对 CVE-2022-35914（GLPI 中的 RCE）的 Ruby 脚本 CVE-2022-35914 只需将目标添加到脚本中。 用法： root@kitploit: ruby.exe exploit.rb = whoami 你可以用以下方式关闭： root@kitploit: = exit...

CVE-2025-49113

CVE-2025-49113 Roundcube 漏洞利用 一款针对 CVE-2025-49113 的 Python 利用工具，利用 Roundcube webmail 中的一个漏洞，通过 PHP 对象反序列化实现远程代码执行。 概述 该利用工具利用了 Roundcube 文件上传功能中的一个反序列化漏洞。它通过构造 GPG 配置 payload 在目标服务器上实现远程代码执行。 功能特性 自动认证 Roundcube CSRF token 提取与处理 会话管理 PHP 对象反序列化 payload 生成 通过 GPG 配置注入实现远程命令执行 使用方法 root@kitploit:...

CVE-2017-12149

CVE-2017-12149 Update of https://github.com/1337g/CVE-2017-12149 to work with python3 Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

CVE-2026-65008

CVE-2026-65008 — Grav CMS 2.0.7 Authenticated RCE Proof-of-concept for CVE-2026-65008 : authenticated remote code execution in Grav CMS via unrestricted calluserfuncarray in Blueprint::dynamicData. A user with admin.pages or api.pages.write can plant a malicious form frontmatter. The payload then...

CVE-2019-0708

CVE-2019-0708-poc CVE-2019-0708 remote code execution vulnerability batch detection 3389hosts is the list of IP addresses to be detected, one per line pool = ThreadPool10 defines the custom scanning thread Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be...

WhatsRCE

WhatsRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? root@kitploit: sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRC...

CVE-2023-38646-PoC-Metabase

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 Apache Dubbo deserialization RCE video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4...

RCE-CVE-2020-5902

RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Description These attacks are targeting BIG-IP, a multi-purpose networking device manufactured by F5 Networks. BIG-IP devices can be configured to work as traffic shaping systems, load balancers, firewalls, access gateways, rate limiters, or SSL...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Description This Nuclei template detects Apache Tomcat servers vulnerable to the TOCTOU race condition that allows remote code execution RCE. ⚠ Important note : This template should be used exclusively for educational purposes and in controlled environments with...

CVE-2022-22963_Reverse-Shell-Exploit

CVE-2022-22963 Reverse Shell Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

CVE-2017-7525-Jackson-Deserialization-Lab

CVE-2017-7525 Java Insecure Deserialization Lab Basic Java REST application vulnerable to Insecure Deserialization, leading to RCE. The project must be run on Java 8u45 Based on Maven with the following dependencies: jackson-databind 2.2.2 commons-collections 3.1 spring-context-support 4.3.11 Mor...

s2-048

s2-048 Exp for s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

CVE-2026-34197

CVE-2026-34197 — Ejecución Remota de Código en Apache ActiveMQ Classic a través de la API Jolokia TL;DR Una vulnerabilidad de ejecución remota de código en Apache ActiveMQ Classic que permite a un atacante ejecutar código arbitrario invocando la operación MBean addNetworkConnectorString a través ...

CVE-2023-24249-Exploit

CVE-2023-24249 Exploit Script Description This repository contains an exploit script for CVE-2023-24249, a critical vulnerability found in laravel-admin version 1.8.19. This vulnerability allows for arbitrary file upload, enabling attackers to execute arbitrary code via a crafted PHP file. The...

CVE-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify This repository contains documentation and analysis for CVE-2026-34038 , a critical command injection vulnerability in Coolify. Summary An authenticated remote command injection vulnerability CWE-78 in Coolify allows users with...

CVE-2019-5544_CVE-2020-3992

Scanner for SLP services CVE-2019-5544 CVE-2020-3992 Python script that implements SRVLOC/SLP protocol to scan for enabled OpenSLP services. You may find it handy while searching for systems impacted by CVE-2019-5544, CVE-2020-3992 or CVE-2021-21974 ... More info on the VMware vulnerability you m...

React2Shell-Exploit-CVE-2025-55182

💀 React2Shell Exploit — CVE-2025-55182 root@kitploit: ██████╗ ███████╗ █████╗ ██████╗████████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔══██╗██╔════╝╚══██╔══╝╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝█████╗ ███████║██║ ██║ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔══██╗██╔══╝...