CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. Auth Bypass Add X-Forwarded-For header to bypass authentication, note that its value is not a fixed value. Brute Force Use Burp Intruder to fuzz test the values of hostid and localdataids. RCE The point of...

CVE-2021-22911

CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1 The getPasswordPolicy method is vulnerable to NoSQL injection attacks and does not require authentication/authorization. It can be used to take over accounts by leaking password reset tokens. Taki...

CVE-2021-25641-Proof-of-Concept

The 0xDABB of Doom - CVE-2021-25641-Proof-of-Concept Apache/Alibaba Dubbo = 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions = 2.7.6 With Different Gadgets Covered in-depth in the article "The 0xDABB of Doom", published on the Checkmarx blog...

CVE-2026-86300

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86299

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...

CVE-2026-45447

🚨 CVE-2026-45447 - Critical OpenSSL Use-After-Free Vulnerability Heap Use-After-Free in PKCS7verify allowing memory corruption, crashes, and potential remote code execution. 📖 Executive Summary CVE-2026-45447 is a critical vulnerability in OpenSSL's PKCS7 verification functionality. The flaw exis...

asa_tools

Cisco ASA RCE Verification This script can be used to verify the presence of CVE-2016-1287. It requires python3 and the python hexdump module to be installed root@kitploit: $ sudo pip3 install hexdump It can be run as follows root@kitploit: python3 cisco-asa.py IP.IP.IP.IP:port...

CVE-2017-10271

CVE-2017-10271 Usage: CVE-2017-12149.py http://targetip:port/ WEBLOGIC RCE Work with windows only, you could edit code a bit for linux...

CVE-2026-86303

CVE-2026-86303 affects the 92181 markdown C library (GitHub repo 92181/markdown). The vulnerability is an out-of-bounds read in the function lds within md.c. The flaw can be triggered remotely with no authentication or user interaction required, carrying a CVSS 3.1 score of 7.3 (HIGH) with low im...

CVE-2026-86303 92181 markdown md.c lds out-of-bounds

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

EUVD-2026-72359

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

CVE-2025-47812-poc

CVE-2025-47812 Wing FTP Server Remote Code Execution RCE Exploit CVE-2025-47812 📌 Credit : Vulnerability discovered by Julien @MrTuxracer. This PoC implementation is based on their original research. This repository hosts a Python exploit for the Wing FTP Server Remote Code Execution RCE...

CVE-2017-5645

CVE-2017-5645 CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization...

CVE_2020_0796_CNA

CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...

CVE-2025-30406

CVE-2025-30406 ViewState Exploit PoC Overview This is a Proof-of-Concept PoC script demonstrating a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET applications. It uses ysoserial to generate a malicious ViewState payload and sends it to a user-specified URL to execute a provided...

CVE-2021-3129_exploit

CVE-2021-3129exploit Exploit for CVE-2021-3129 Lab setup: root@kitploit: $ git clone https://github.com/laravel/laravel.git $ cd laravel $ git checkout e849812 $ composer install $ composer require facade/ignition==2.5.1 $ php artisan serve Usage: root@kitploit: $ git clone...

CVE-2026-6433

CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS, JS & PHP · Unauthenticated SQL injection → RCE via eval Affected: FlipperCode Custom CSS, JS & PHP ≤ 2.0.7 · WordPress plugin surface via admin-ajax.php At a glance...

CVE-2024-9264

CVE-2024-9264 Inyección SQL de DuckDB post-autenticación en Grafana RCE, Lectura de archivos Prueba de Concepto PoC Este PoC demuestra la explotación de CVE-2024-9264 mediante un usuario autenticado para realizar una consulta SQL de DuckDB y leer un archivo arbitrario del sistema de archivos o...

CVE-2023-38831-WinRAR-Vulnerability-Analysis

CVE-2023-38831-WinRAR-Vulnerability-Analysis This project is a cybersecurity research and analysis project focused on CVE-2023-38831, a critical WinRAR vulnerability that allows attackers to execute malicious code through specially crafted archive files. The project was conducted in a controlled...

CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...