276859 matches found
PoC-CVE-2026-1357
PoC CVE-2026-1357：WPvivid Backup & Migration WordPress 的 Migration, Backup, Staging – WPvivid Backup & Migration 插件在 0.9.123 及更早版本中存在未认证的任意文件上传漏洞。该漏洞源于 RSA 解密过程中的错误处理不当，以及在写入上传文件时缺乏路径清理。当插件使用 opensslprivatedecrypt 解密会话密钥失败时，它不会终止执行，而是将布尔值 false 传递给 phpseclib 库的 AES 密码初始化。该库将此 false...
WordPress FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation vulnerability
Authenticated Author+ Remote Code Execution to Privilege Escalation vulnerability discovered by Wordfence PRISM in WordPress Plugin FireBox versions = 3.1.10...
CVE-2026-10170-RCE
Visitor Management System 1.0 - SQLi to Remote Code Execution Attack Chain Vulnerability Information...
ghostlock-vagrant-box
Full Chain Vulnerability Testbed: Nginx RCE → GhostLock LPE Overview This repository provides a Vagrant environment designed to demonstrate a complete two-stage exploitation chain. The testbed automatically provisions an isolated Ubuntu 22.04 LTS virtual machine that is intentionally configured t...
cve-2025-43564-tomcat_put_rce_reproduction
CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE...
CVE-2023-22496-PoC
CVE-2023-22496 — Netdata Agent OS Command Injection PoC Severity : Critical CVSS 9.8 Affected : Netdata Agent Fixed in : v1.37.0 Type : OS Command Injection CWE-78 Overview CVE-2023-22496 is an OS command injection vulnerability in Netdata's health alarm notification system. The registryhostname ...
CVE-2026-42945
RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...
CVE-2021-23639
Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: root@kitploit: python3...
CVE-2018-5955
CVE-2018-5955 An exploit for CVE-2018-5955 GitStack 2.3.10 Unauthenticated RCE Exploit: GitStack 2.3.10 Unauthenticated Remote Code Execution Date: 18.01.2018 Software Link: https://gitstack.com/ Exploit Author: Kacper Szurek Original Exploit: https://www.exploit-db.com/exploits/43777 Website:...
CVE-2007-2447-RCE
This exploit helps you to get a reverse shell, exploting Samba 3.0.20 3.0.25 · When executing the script with python3 with the --help parameter, it asks us for a series of parameters root@kitploit: --lhost LHOST your host ip where the shell will be received --lport LPORT your port port where the...
CVE-2024-13985
CVE-2024-13985 — Dahua EIMS capturehandle.action Remote Code Execution Advisory type: Vendor-coordinated security disclosure · Active exploitation reported CVE ID: CVE-2024-13985 CNVD ID: CNVD-2024-17054 Vendor: Zhejiang Dahua Technology Co., Ltd. Product: EIMS Enterprise Information Management...
OpenSTAManager_RCE_Exploit-CVE-2026-38751-
OpenSTAManager RCE Exploit CVE-2026-38751 Overview This Python script exploits a Remote Code Execution vulnerability in OpenSTAManager version 2.10, identified as CVE-2026-38751. The exploit allows authenticated users to upload a malicious module and execute arbitrary commands on the target syste...
CVE-2023-21608
CVE-2023-21608 Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit Blog https://medium.com/@Kushagra007/adobe-acrobat-reader-resetform-cagg-uaf-rce-exploit-cve-2023-21608-652624346c8f DEMO...
CVE-2023-34362
CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Technical Analysis A technical root cause analysis of the vulnerability can be found on the blog: Summary This POC abuses an SQL injection to obtain a sysadmin API access token and then uses that access to abuse a deserialization cal...
CVE-2017-0199
Exploit toolkit CVE-2017-0199 Exploit toolkit CVE-2017-0199 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victi...
CVE-2024-47176-Scanner
Quick Start Example usage: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 Vulnerability Scanner cups-browsed What is CUPS And Why Does It Matter? CUPS Common Unix Printing System is an open-source framework for managing and controlling printers on UNIX and...
CVE-2023-22527-POC
CVE-2023-22527: Atlassian Confluence Vulnerability Introduction The CVE-2023-22527 vulnerability is a critical security flaw in Atlassian Confluence, a widely used collaboration and documentation platform. This vulnerability exists in both Confluence Data Center and Confluence Server, which are...
OffensivePascal-CVE-2010-2075
CVE-2010-2075 FreePascal implementation of CVE-2010-2075 Vulnerability UnrealIRCd 3.2.8.1 RCE by sending "AB; command" to any listening service. Any command you send is executed by the same user as UnrealIRCD runs as. This implementation launches a reverse shell to your listener. Step 1 Start a...
CVE-2022-22954-Testi
CVE-2022-22954-Testing Testing the CVE-2022-22954 Vulnerability VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result ...