ForgottenButNotGone

Forgotten but Not Gone This repository contains proof-of-concept scripts for the vulnerabilities presented at the talk "Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services" from Black Hat USA 2026 and DEF CON 34. CVE-2026-28372 Local privilege escalation in TelnetD:...

CVE-2025-4632_POC

Samsung MagicINFO 9 Server Exploit CVE-2025-4632 This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution RCE vulnerability in Samsung MagicINFO 9 Server versions prior to 21.1052. The vulnerability exists due to an improper limitation of a...

cve-2025-13486-vuln-setup

CVE-2025-13486 कमजोर परीक्षण वातावरण ACF Extended RCE कमजोरी के परीक्षण के लिए एक-बार Docker सेटअप। त्वरित आरंभ root@kitploit: 1. प्लगइन्स डाउनलोड करें एक बार चलाएं ./download-plugins.sh 2. वातावरण शुरू करें docker-compose up -d --build 3. सेटअप के लिए 30 सेकंड प्रतीक्षा करें, फिर परीक्षण करें...

CVE-2026-11344-RCE

Vehicle Management System In PHP - Unauthenticated Remote Code Execution via File Upload in newdriver.php Vulnerability Information...

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

InSAT MasterSCADA BUK-TS - Unauthenticated RCE CVE-2026-22553 | CVSS 9.8 Critical | Exploit Author Mohammed Idrees Banyamer 📝 Description InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers t...

CVE-2026-47858

CVE-2026-47858 — Spring Tools "live information" mode unauthenticated JMX RCE PoC 中文 README | Advisory: Spring Security | CVE Record Vulnerability : Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 start Spring Boot applications in live information mode enabled by default with JVM...

CVE-2026-56705

CVE-2026-56705: Adminer 5.4.3 — Unauthenticated RCE via MSSQL PDO DSN Injection...

CVE-2026-41900-POC

OpenLearnX-RCE OpenLearnX Unauthenticated RCE via Container Volume Mount Diff-based discovery → Silent patch → Sandbox escape → Full /tmp disclosure...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n RCE Exploit Unauthenticated RCE chain for n8n 1.121.0 CVSS 10.0 Attack Chain 1. CVE-2026-21858 - Content-Type confusion → read /home/node/.n8n/config and database.sqlite 2. Extract encryption key and admin credentials from files 3. Forge admin JWT token 4...

CVE-2026-3395-Lab

CVE-2026-3395 — مختبر RCE غير المصادق عليه في MaxSite CMS هذا المستودع مخصص لأغراض تعليمية وبحثية فقط. يجب إجراء جميع الاختبارات في بيئة مختبر Docker محلية. لا تنشر هذا الإعداد على الأنظمة العامة أو أنظمة الإنتاج. ملخص يؤثر CVE-2026-3395 على MaxSite CMS ويسمح بالوصول غير المصادق عليه إلى نقطة نها...

CVE-2026-48908-by-yora

🔐 CVE-2026-48908 Scanner & Safe PoC Joomla SP Page Builder — Unauthenticated File Upload / Potential RCE Developed byyora 📌 About This project is a security research and vulnerability detection tool developed by yora to help identify CVE-2026-48908 affecting SP Page Builder for Joomla. The...

CVE-2026-3395-MaxSite-CMS-Unauthenticated-RCE

CVE‑2026‑3395 — MaxSite CMS Unauthenticated Remote Code Execution...

CVE-2026-22812

CVE-2026-22812 CVE-2026-22812 - OpenCode Unauthenticated RCE Nuclei template for scan. burp suite request root@kitploit: POST /session HTTP/1.1 Host: target.com User-Agent: Mozilla/5.0 X11; Linux x8664 Content-Type: application/json Content-Length: 2 root@kitploit: POST /session/"id"/shell HTTP/1...

CVE-2026-0073-Research

CVE-2026-0073-Research CVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works. First Part : Code analysis: At first, the only thing that could possibly be interesting is learn more about the bug itself. My first source is :...

POC-CVE-2026-1357

CVE-2026-1357 WPvivid Backup & Migration RCE PoC Discovered by: Lucas Montes NiRoX Vulnerability: Unauthenticated Arbitrary File Upload leading to Remote Code Execution RCE CVE ID: CVE-2026-1357 CVSS: Critical9.8 Status: Patched in version 0.9.124 Overview This repository contains the analysis an...

SneeitScanner-CVE-2025-6389

SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Proof of Concept PoC and Automated Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 This robust Python script is a functional PoC and scanner tool...

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP Unauthenticated remote code execution vulnerability in SPIP before 4.2.1. The oubli parameter in the password reset form is vulnerable to PHP object injection due to mishandled deserialization. A crafted serialized payload is executed server-side as the web user, and the...

MegaQuagga_Pentesting_Report

MegaQuagga Pentesting Report This repository contains a full web application penetration test performed against a WordPress environment. The assessment includes vulnerability discovery, exploitation, post-exploitation, and documentation of real-world attack impact. 🔍 Project Overview Target:...

CVE-2025-34037

CVE-2025-34037 نسخة بايثون من أداة استغلال RCE الخاصة بـ Linksys tmUnblock.cgi للاستخدام التعليمي فقط. شغّله على أجهزتك الخاصة. الثغرة تقبل نقطة النهاية tmUnblock.cgi على عدة طرازات من راوترات Linksys طلبات POST دون التحقق من ترويسة Authorization. يتم تمرير المعامل ttcpip مباشرة إلى أمر shell، مم...

CVE-2025-471812-POC

root@kitploit: / | / | / / | / / / |/ // / / / / / / | | / /| |/ / / / / /|/ / / / / // // /| |/ / | / // / / / // / /// |/ |/ // /// CVE-2025-47812 — Wing FTP Server = 7.4.3 Unauthenticated RCE Proof-of-concept exploit for CVE-2025-47812 , an unauthenticated remote code execution vulnerability...