276147 matches found
PS4-6.20-WebKit-Code-Execution-Exploit
PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...
BlueGate
BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...
CVE-2023-20887
CVE-2023-20887 Exploit VMWare vRealize Network Insight Pre-Authenticated RCE CVE-2023-20887 Usage root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l...
unomi_exploit
Disclaimer The vulnerability detection methods, files, and other content provided here are strictly limited to use by security professionals under legal authorization, for the purpose of testing the security of authorized servers. Security professionals must comply with legal regulations and are...
rschunter
RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...
ripple20-digi-connect-exploit
Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...
CVE-2020-13945-EXPLOIT
CVE-2020-13945 - Apache APISIX Remote Code Execution RCE This repository contains a proof-of-concept PoC exploit for a vulnerability in Apache APISIX. The vulnerability arises when the Admin API is enabled and the access IP restriction rules are deleted, allowing the default token to access APISI...
CVE-2024-7627-PoC
CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...
metasploitable2-vsftpd-writeup
Metasploitable2 ā vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux ā Metasploitable2 environment. Objective Practice the core penetration testing workflow ā reconnaissance,...
CraftCMS_CVE-2023-41892
Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage root@kitploit: python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : root@kitploit: python3 -m pip install requests...
CVE-2020-10673
CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...
CVE-2020-8958
CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...
CVE-2023-43208-EXPLOIT
CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exploit šØ Introduction š This repository contains a Proof-of-Concept PoC exploit for a critical vulnerability in NextGen Healthcare Mirth Connect versions prior to 4.4.1. The vulnerability, tracked as CVE-2023-43208, allows for...
Langflow < 1.9.0 - Remote Code Execution
Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...
CVE-2026-41089
CVE-2026-41089 root@kitploit: āāāāāāāāāā āāāāāāāāāāā āāā āāā āāā āāāāāāā āāāāāāā āāāāāāāāāāā āāāāāāāāāāā āāā āāāāāāāāāāāāāāāāāāāāāāāāā āāā āāā āāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāā āāāā āāāāāāāāāā āāāāāāāā āāāāāāāāāāāāāāāāāāāāā āāāāāāāā āāāāāāā āāāāāāāā āāā āāā āāāāāāāāāāāāāāāāāāāāā āāāāāā...
CVE-2022-22909
CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...
CVE-2022-37042
CVE-2022-37042 Usage View vulnerability information. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible...
CVE-2023-34468
CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code...
cve-2020-11060-poc
CVE-2020-11060 This script is a Python 3.x based exploit for CVE-2020-11060 in GLPI versions 0.85-9.4.5. Original implementation: 0xdreadnaught Python3 refactoring: n3rada The original PoC in ExploitDB is now deprecated since it used Python 2.x. The new version has been submitted, and a link will...
CVE-2025-31324
Info āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā N U L L T R A C E // NullTrace :: No logs. No noise. Just signal. // ----- SIGNATURE----- Key: ssh-rsa AAAAB3...NullKey...KFA== Fingerprint:...