CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ https://github.com/user-attachments/assets/403a70f4-4ff4-4ab7-b11c-d73d70adaf0b Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git...

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

CVE-2021-26121

CS-Cart templates.manage Server Side Template Injection Remote Code Execution Vulnerability Found by: Steven Seeley of 360 Vulcan Team Version: = 4.12.x latest Date: 2021-01-08 12:49 CVE: CVE-2021-26121 Disclosure Timeline 2021-01-26 – Sent to CSCart dev team 2021-01-27 – Notification of reciept...

cve-2026-27483

CVE-2026-27483 MindsDB Path Traversal to RCE PoC This PoC script is based on the following GitHub advisory By default MindsDB does not use auth PoC supports both unauthenticated and authenticated modes We can query /api/handlers/ to find available handlers, use any available but not installed...

CVE-2025-60787_PoC

CVE-2025-60787 - MotionEye RCE Authenticated RCE in MotionEye = 0.43.1b4 via client-side validation bypass on the imagefilename field. Usage root@kitploit: nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Flags...

CVE-2012-6066

CVE-2012-6066 FreeSSHD Remote Authentication Bypass Vulnerability freeSSHd 2.1.3 Version check : nmap -A...

CVE-2026-1405

CVE-2026-1405 Slider Future = 1.0.5 - Unauthenticated Arbitrary File Upload 🚀 CVE-2026-1405.py — Slider Future Mass Exploit Tool 🩸 Vulnerability Overview Component: Slider Future WordPress plugin Affected Versions: ≤ 1.0.5 Vulnerability: Unauthenticated Arbitrary File Upload CVE: CVE-2026-1405 CV...

CVE-2017-11882

CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...

react2shellpoc

This repository contains a proof‑of‑concept demonstrating how a specific class of React Server Component vulnerabilities behaves inside a controlled, legal training environment. Manual root@kitploit: ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ ||...

CVE-2026-90712

A denial of service vulnerability was identified in Gitlawb openclaude up to version 0.30.0 , affecting the waitForCallback function in the file src/services/api/xaiOAuthCallback.ts within the xAI OAuth Callback Handler component. The root cause is manipulation of the Error argument, which can le...

EUVD-2026-77427

A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OAuth Callback Handler. The manipulation of the argument Error leads to denial of service. Remote exploitation of the...

CVE-2026-90712 Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service

A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OAuth Callback Handler. The manipulation of the argument Error leads to denial of service. Remote exploitation of the...

git-remote-pqcrypt

git-remote-pqcrypt root@kitploit: THIS IS AN EXPERIMENTAL PROJECT, there hasnt been a formal security audit. DO NOT rely on this for any critical repositories. git-remote-pqcrypt is an encrypted Git remote helper similar to gcrypt. It stores Git packfiles and repository metadata encrypted at rest...

cve-2020-29007

CVEID : CVE-2020-29007 Name of the affected products and versions : Mediawiki Score all versions up to 0.3.0 Problem type : CWE-96: Improper Neutralization of Directives in Statically Saved Code ‘Static Code Injection’ Summary Score is a Mediawiki extension which generates musical notation based ...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-37164, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in HPE OneView. DISCLAIMER THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY. Use only o...

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...