Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

Microsoft Standard XPS Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network...

CVE-2026-48282-coldfusion-rds-detection

CVE-2026-48282 — Adobe ColdFusion RDS Validation and Detection Laboratory validation of CVE-2026-48282 in Adobe ColdFusion Remote Development Services RDS, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in whi...

web-penetration-drupal

Web Penetration Testing — Drupal CVE-2018-7600 Type: Internship Project | Company: BB CyberSec | Period: Nov 2024 – Jan 2025 📋 Project Overview This project documents a full penetration test conducted on a Drupal web application as part of my cybersecurity internship at BB CyberSec. The assessmen...

log4j2-vuln-lab

⚠️ Disclaimer : This project is intended for security learning and technical research only. All vulnerability environments are set up locally, and no real targets have been tested. Do not use it for illegal purposes. The risk of using this project is borne by the user. Log4j2 Vulnerability...

wordpress-rce-vapt-cve-2020-25213

WordPress RCE Exploitation & Mitigation CVE-2020-25213 📌 Project Overview This project was developed as part of the IE4012 – Offensive Hacking Tactics & Strategies module. It demonstrates a full cybersecurity attack lifecycle in a controlled lab environment, including: Social engineering attack...

PoC-CVE-2024-23113

Disclaimer The code and materials contained in this repository are provided strictly for educational, research, and authorized security testing purposes. Prohibited Use Do not use this tool/code against any infrastructure, systems, or networks without explicit, prior written permission from the...

CVE-2021-44228

🚨 CVE-2021-44228 — “Log4Shell” A critical remote code execution vulnerability in Apache Log4j 2 , widely known as Log4Shell. 📖 Table of Contents Overview Technical Details Severity & CVSS Affected Versions Exploitation & Impact Real-World Impact Detection Mitigation & Fixes Summary 🔎 Overview...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Cadena de explotación para dos vulnerabilidades que afectan Flowise = 3.0.5. Vulnerabilidades CVE-2025-58434 — Toma de Cuenta No Autenticada El endpoint de olvido de contraseña devuelve un token de restablecimiento de contraseña válido en la respuesta de la API sin...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 Unauthenticated RCE MCP stdio env-var injection Unauthenticated remote code execution in Langflow OSS through 1.10.1. The environment-variable blocklist that guards MCP stdio server configuration DANGEROUSENVVARS omits SHELLOPTS, BASHOPTS and PS4. Because th...

CVE-LiteLLM

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2025-53770

CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...

CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...

CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...

CVE-2026-25089

🚨 CVE-2026-25089 - Critical OS Command Injection in FortiSandbox 📖 Overview CVE-2026-25089 is a critical OS Command Injection CWE-78 vulnerability affecting multiple Fortinet FortiSandbox deployments. An unauthenticated remote attacker can exploit this flaw by sending specially crafted HTTP...

CVE-2026-0740

CVE-2026-0740 Ninja Forms File Uploads = 3.3.26 - Unauthenticated Arbitrary File Upload to RCE Exploit for CVE-2026-0740 discovered by Selim Lanouar whattheslime. For a complete technical deep dive, read the full article on Lexfo's blog. Disclaimer This repository is provided for research and...

CVE-2026-75021

fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback. As a result the debugging interface can be exposed beyond the local machine, and...

AEMPWN

AEMPWN AEM Forms Scanner for CVE-2025-54253 & CVE-2025-54254 AEMPWN is a targeted scanner for identifying high-risk Adobe Experience Manager AEM Forms vulnerabilities, with support for safe detection, blind out-of-band OOB confirmation, and full proof-of-concept PoC validation workflows. This too...