CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. It's written in python3, and remember to install the requests library. here is the command. root@kitploit: pip3 install requests...

CVE-2026-4060-PoC

CVE-2026-4060 — Geo Mashup ≤ 1.13.18 Unauthenticated SQL Injection PoC -blue Unauthenticated attackers can inject arbitrary SQL into the ORDER BY clause via the sort parameter of the Geo Mashup render-map endpoint, enabling time-based blind extraction of sensitive database information. Table of...

Grafana-cve-2025-4123

Grafana-cve-2025-4123 Result root@kitploit: FOFA app="Grafana" Shodan product:"Grafana Open Source" SSRF root@kitploit: http://localhost:3000/render/public/..%252f%255COpenRedirectURL%252f%253F%252f..%252f.. Open Redirect root@kitploit: /public/..%2F%5cwebsite.com%2F%3f%2F..%2F...

CVE-2019-5418

CVE-2019-5418 1. Descripción de la vulnerabilidad Ruby on Rails es un framework de aplicaciones web, relativamente nuevo, construido sobre el lenguaje Ruby. Esta vulnerabilidad se debe principalmente a que Ruby on Rails utiliza el parámetro render file para renderizar vistas fuera de la...

CVE-2016-2098

CVE-2016-2098 Action Pack en Ruby on Rails anterior a 3.2.22.2, 4.x anterior a 4.1.14.2, y 4.2.x anterior a 4.2.5.2 permite a atacantes remotos ejecutar código Ruby arbitrario aprovechando el uso sin restricciones del método render por parte de una aplicación. https://vulners.com/cve/CVE-2016-209...

CVE-2018-7600

CVE-2018-7600 - Drupal 7 Remote Code Execution A Rust implementation of the CVE-2018-7600 exploit targeting vulnerable Drupal 7 installations = 7.57. This CLI reproduces this following PoC flow: it poisons a cached renderable form via the user/password path, extracts a formbuildid, then triggers...

CVE-2020-8163

CVE-2020-8163 CVE-2020-8163 - Remote code execution of user-provided local names in Rails Remote code execution of user-provided local names in Rails 5.0.1 There was a vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the locals argument of a render cal...

vBulletin_5.x-tab_panel-RCE

vBulletin5.x-tabpanel-RCE CVE-2020-17496 is a vulnerability in vBulletin’s ajax/render/widgetphp route by injecting malicious code via the widgetConfig parameter. Affected System vBulletin 5.5.4 5.6.2 vBulletin 5.x Widgettabbedcontainertabpanel RCE Vuln Test script Usage root@kitploit: python...

CVE-2019-5418

CVE-2019-5418 - File Content Disclosure on Rails EDIT : this CVE can lead to a Remote Code Execution, more info: https://github.com/mpgn/Rails-doubletap-RCE There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to rend...

CVE-2025-4123

Grafana CVE-2025-4123 Exploit CVE ID: CVE-2025-4123 Severity: High Impact: Server-Side Request Forgery SSRF, Cross-Site Scripting Affected Versions: Grafana 11.2, Grafana 11.3, Grafana 11.4, Grafana 11.5, Grafana 11.6, Grafana 12.0 Full Writeup Writeup root@kitploit: ❯ sudo python server.py --hos...

Pre-render-data-spoofing-on-React-Router-framework-mode-CVE-2025-43865

Welcome to React Router! A modern, production-ready template for building full-stack React applications using React Router. Features 🚀 Server-side rendering ⚡️ Hot Module Replacement HMR 📦 Asset bundling and optimization 🔄 Data loading and mutations 🔒 TypeScript by default 🎉 TailwindCSS for stylin...

CVE-2018-7600

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2018-7600 - Day Started: 26/06/2024. Table of contents: 1. CVE summary 2. Prerequisites 3. CVE Analyse 4. Mitigation CVE summary An attacker could call a Drupal Form API Ajax Request containing the calluserfunc auto do function Drupal before 7.58,...

stylesmuggler

StyleSmuggler HTTP PoC Private research repository for the HTTP-only reproduction of StyleSmuggler, CVE-2026-75650, against a local Magento Open Source lab. Read the full technical walkthrough in Magento StyleSmuggler RCE: Report Poisoning to Code Execution. The Python PoC performs the complete...

drupalgeddon2-cve-lab

Drupalgeddon2 CVE-2018-7600 lab This repository is a reusable target package for the Drupalgeddon2 run. Sentinel reproduced CVE-2018-7600 on 2026-08-27 against Drupal core 7.57 with SQLite and PHP 7.4. The exploit is the Drupal 7 two-request AJAX render-array path: 1. poison the user password for...

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Use git clone...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Class Input Validation Error Credits Tobias Kraze from makandra an...

EUVD-2026-83556

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values in versions up to, and including, 4.5.13 This is due to insufficient input sanitization of nested array values in the usermetasave function and unsafe output of filter CSS value...

CVE-2026-5400 Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values in versions up to, and including, 4.5.13 This is due to insufficient input sanitization of nested array values in the usermetasave function and unsafe output of filter CSS value...

CVE-2026-5400 Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values in versions up to, and including, 4.5.13 This is due to insufficient input sanitization of nested array values in the usermetasave function and unsafe output of filter CSS value...