cve-2019-1003000-jenkins-rce-poc

PoC：Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security，CVE-2019-1003001 Pipeline: Groovy，CVE-2019-1003002 Pipeline: Declarative 一个概念验证，允许具有 Overall/Read 权限和 Job/Configure（以及可选的 Job/Build）权限的用户绕过沙箱保护，在 Jenkins 主节点或代理节点上执行任意代码。 更新 : 一篇由 Orange Tsai 撰写的文章，解释了利用 CVE-2018-1000861 和...

nimux

纯 Nim 编写的网络枚举与远程执行工具包 nimux - 原生操作员工具包 nimux 是一个面向授权安全评估的原生命令界面。它将网络枚举、轻量级 Web 发现、凭据验证、Active Directory 操作、Kerberos 工作流、远程执行、文件传输、机密收集、DCSync、GPO 操作、数据库客户端和 SOCKS 路由整合到一个纯 Nim 工具包中。 当前版本：v1.0.6 您正在访问 nimux 的官方公共仓库。 网站：https://nimux.wiki 文档：https://docs.nimux.wiki 源码：https://github.com/blue0x1/nim...

CVE-2025-67435

CVE-2025-67436 Authenticated Remote Code Execution RCE in PluXml CMS 5.8.22 Researcher : Chowdhury Faizal Ahammed Installation root@kitploit: git clone https://github.com/pluxml/PluXml.git cd PluXml ddev config --project-type=php --php-version=8.1 --docroot=. ddev start...

CVE-2019-19781

CVE-2019-19781 Citrix Netscaler RCE...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023. authentication| complexity| vector ---|---|--- not available| not available| not available...

CVE-2021-41773_42013

CVE-2021-41773 and CVE-2021-42013 Lab Setup Setup root@kitploit: $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTE: The httpd.conf files are configured to be vulnerable...

Apache-Druid-CVE-2021-25646-Exploit

Apache Druid RCE 漏洞利用 CVE-2021-25646 通过 JavaScript 代码注入实现 Apache Druid 远程代码执行的 Python 利用脚本 CVE-2021-25646。 描述 该脚本利用 Apache Druid（版本 0.20.1）中的一个 RCE 漏洞，该漏洞允许通过特制的采样器请求执行任意代码。 用法 root@kitploit: python3 druidrce.py -u http://target:8888 -c "commandtoexecute" 参数 -u/--url - 目标 URL（例如...

CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView 未认证 RCE PoC 这是 CVE-2025-37164 的概念验证（PoC）利用程序，该漏洞是 HPE OneView 中的一个严重（CVSS 10.0）未认证远程代码执行漏洞。 免责声明 本软件仅供教育和授权安全测试目的使用。 仅可在您拥有或已获得明确书面许可的系统上使用 未经授权访问计算机系统属于违法行为 作者不对因使用本工具而造成的任何滥用或损害负责 本工具用于受控环境中的防御性安全研究和渗透测试 漏洞详情 CVE ID ：CVE-2025-37164 CVSS 分数 ：10.0（严重） 厂商 ：Hewlett...

CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape

CVE-2026-1337 – Inyección de Prompt a RCE en Asistente de Codificación con IA 📖 Resumen Una vulnerabilidad de inyección de prompt en un bot de revisión de código impulsado por IA permite a un atacante inyectar comandos de shell arbitrarios manipulando la sugerencia de "corrección" del bot. El...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

CVE-2020-5902

CVE-2020-5902 exploit code for F5-Big-IP CVE-2020-5902 Summary In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE...

CVE-2019-15107-Exploit

CVE-2019-15107 Python Exploit This exploit is for CVE-2019-15107 Webmin 1.890-1.920 unauthenticated RCE implemented in Python. Usage root@kitploit: python3 webminExploit.py python3 webminExploit.py 10.200.198.200 10000 whoami python3 webminExploit.py 10.200.198.200 10000 "curl -h"...

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 Exploitation tool written in Python 3 compatible with lists of URL/IPs. This download includes a list of over 334,300 potentially vulnerable hosts according to shodan.io and personal scans. This tool is NOT free to prevent abuse. As of now patches are being appli...

CVE-2019-5624

CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...

CVE-2021-1675_PrintNightMare

PrintNightmareScanner Scanner to detect Windows Print Spooler Remote Code Execution Vulnerability CVE-2021-1675 Prerequisite's python3 python3 -m pip install -r Requirements.txt Usage python3 detectprintnightmare.py --help root@kitploit: usage: detectprintnightmare.py -h -t TARGET -T TARGETS -c...

dubbo-rce

CVE-2023-23638 For learning and research purposes only. ZooKeeper is required. The test environment is Java 8. Other versions have not been tested and usability is not guaranteed. During reproduction, you need to add the VM parameter to DemoComsumer: -Ddubbo.hessian.allowNonSerializable=true. For...

WebKit-CVE-2016-4622

WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...

n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613

n8n Authenticated Expression Injection RCE – CVE-2025-68613 Critical Remote Code Execution CVSS 9.9 in n8n Workflow Automation Tool Proof of Concept – For educational and authorized security research use only ⚠️ Important Legal Warning This code is provided STRICTLY for educational purposes and...

cve-2025-59287

CVE-2025-59287 - WSUS Exploitation Toolkit by adel-h4x0a ⚠️ For Educational and Authorized Testing Purposes Only ⚠️ Overview This toolkit demonstrates the exploitation of CVE-2025-59287, a remote code execution vulnerability in Windows Server Update Services WSUS. Components 1. Encryption Module...

text4shell-exploit

text4shell-exploit Un exploit personalizado basado en Python, un proof-of-concept PoC dirigido a Text4Shell CVE-2022-42889, una vulnerabilidad crítica de ejecución remota de código en Apache Commons Text versiones 1.10. Este exploit ataca aplicaciones Java vulnerables que utilizan la clase...