275631 matches found
CVE-2024-25153
Exploit for CVE-2024-25153 Table of Contents Click to expand 1. Introduction 2. Installation 3. Usage 4. Contributing 5. License Introduction Welcome to the Exploit for CVE-2024-25153! This project is a solution to exploit the CVE-2024-25153 vulnerability and execute code remotely in Fortra...
CVE-2023-36844
CVE-2023-36844 该漏洞是Juniper JunOS中SRX和EX系列产品的远程代码执行漏洞，允许攻击者在运行JunOS软件的目标Juniper设备上执行任意代码。该漏洞可能导致受影响的设备被入侵，对其服务的网络构成严重安全风险。 Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-36844 $ cd CVE-2023-36844 $...
PS-2018-002---CVE-2018-14442
Foxit Reader - CPDFParser::mpCryptoHandler - Uso después de liberación - RCE Vulnerabilidad Hacer referencia a memoria después de que ha sido liberada puede provocar que un programa se bloquee, use valores inesperados o ejecute código. Descripción de la vulnerabilidad Esta vulnerabilidad permite ...
Exploit_CVE-2019-17558-RCE
ExploitCVE-2019-17558-RCE Inyección en Apache Solr 1.4 para obtener una shell para codificar url, postrequest, getrequest...
Ashwesker-CVE-2025-52691
🚨 CVE-2025-52691 — Critical SmarterMail Vulnerability Status: 🔥 Critical — Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29–30, 2025 🧩 Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...
CVE-2025-63406-PoC
CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Usage root@kitploit: python3 CVE-2025-63406.py -u -n -p ...
CVE-2025-55182-POC
CVE-2025-55182 / CVE-2025-66478 Vulnerability Reproduction Environment This is a minimal MVP for reproducing the React2Shell CVE-2025-55182 and Next.js RSC RCE CVE-2025-66478 vulnerabilities. ⚠️ Warning This project is intended for security research and educational purposes only. Do not use it in...
CVE-2014-6271
Shellshock Vulnerability Checker This script checks if a website is vulnerable to the Shellshock vulnerability CVE-2014-6271. Summary: The Shellshock vulnerability, also known as Bashdoor, is a security flaw that was discovered in September 2014 in the Unix Bash shell. The vulnerability allows...
Magento-eCommerce-RCE-CVE-2015-1397
Magento Shoplift 漏洞利用 SUPEE-5344 - CVE-2015-1397 概述 本脚本利用 Magento 中的 CVE-2015-1397 漏洞，通常称为 Magento Shoplift 漏洞利用。它允许攻击者通过注入 SQL 载荷在 Magento 数据库中创建新的管理员用户。 最初由 Manish Kishan Tanwar error1046 用 Python 编写，此版本已由 Divine Clown 0xDTC 转换为 Bash ，并添加了友好的输入提示以输入凭据。 特性 凭据提示 ：动态提示输入目标 URL、管理员用户名和密码。 错误处理...
CVE-2022-29078
CVE-2022-29078 | EJS SSTI → RCE White Hat School 4.ª generación clase 32 - Woo Sang-beom @taka3636 Resumen La vulnerabilidad de inyección de plantillas del lado del servidor SSTI en EJS , como en Hello . Internamente, EJS compila la cadena de la plantilla en una función de JavaScript y luego la...
CVE-2023-4220
Proof of concept exploit for CVE-2023-4220 Affected product : Chamilo = 1.11.24 This CVE abuses an unauthenticated file upload vulnerability in Chamilo 1.11.24 and lower. An attacker has the ability to upload PHP files with no restrictions, leading to RCE. How to use root@kitploit: python3...
CVE-2025-26633
CVE-2025-26633 - MSC EvilTwin PoC Proof of Concept PoC for CVE-2025-26633 vulnerability exploiting Microsoft Management Console MMC About This PoC simulates the CVE-2025-26633 vulnerability, discovered by Trend Micro, which exploits the loading of malicious .msc files for remote command execution...
CVE-2025-58180
CVE-2025-58180 RCE in OctoPrint via Unsanitized Filename in File Upload In OctoPrint version =1.11.2, an attacker with file upload access e.g., valid API key or session can craft a malicious filename that bypasses sanitization and is later executed by OctoPrint’s event system, leading to remote...
cve-2025-55182-poc
CVE-2025-55182 React2Shell - Academic Proof of Concept ⚠️ DISCLAIMER: EDUCATIONAL USE ONLY This repository contains functional exploit code for a critical vulnerability CVSS 10.0. It is intended strictly for academic research, security analysis, and educational purposes. Do not use this code...
CVE-2019-19609-POC-Python
The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...
Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-
Vulnerabilidad RCE del demonio del Protocolo Punto a Punto CVE-2020-8597- Instituto de Tecnología de la Información de Sri Lanka root@kitploit: Asignación 1 M. P. D. M. Dias IT19165530 MLBWDY2S113.1 Vulnerabilidad RCE del demonio del Protocolo Punto a Punto CVE-2020-8597 Programación de Sistemas ...
CVE-2023-51385_test
Verifying CVE-2023-51385 First, add the following content to /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p There is a command injection in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/b...
Hacking-pdf.js-vulnerability
🚨 CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js This project demonstrates and analyzes CVE-2024-4367 , a high-severity vulnerability in Mozilla’s PDF.js library that allows arbitrary JavaScript execution through improper type checking in font handling code. Our research shows how a...
westone-CVE-2021-21972-scanner
westone-CVE-2021-21972-scanner Vulnerabilidad de ejecución remota de código en VMware vCenter Server. Un atacante malicioso con acceso al puerto 443 puede enviar una solicitud cuidadosamente construida al vCenter Server, lo que eventualmente provocará la ejecución remota de código arbitrario...