150357 matches found
CVE-2025-55182
CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...
CVE-2019-8451
CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kitploit: root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...
CVE-2022-27925
Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925...
CVE-2022-23131
CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Description This script is an exploit for CVE-2022-23131 , a vulnerability in the Zabbix SSO Single Sign-On mechanism. The vulnerability allows an attacker to bypass authentication via a specially crafted zbxsession cookie, giving...
CVE-2025-51865
CVE-2025-51865 Vulnerability description Ai2 is a Seattle based non-profit AI research institute. Ai2 provide a playground web application to chat with their LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other...
CVE-2022-29464-mass
WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Write by Chocapikk lightely modded by trhacknon Usage root@kitploit: python exploit.py -u or: root@kitploit: python exploit.py -f Zoomeye Dork CLI: root@kitploit: zoomeye search 'title:"WSO2 Management Console"' -num 10...
CVE-2026-18351
The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...
CVE-2025-24071
Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...
CVE-2022-40684-metasploit-scanner
CVE-2022-40684-metasploit-scanner An authentication bypass using an alternate path or channel in Fortinet product preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner cd CVE-2022-40684-metasploit-scanner mkdir -p...
CVE-2024-29269
CVE-2024-29269 Which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers. Dork ZoomEye :- title:"Login to TLR-2005KSH" Source:...
regreSSHion-checker
regreSSHion-checker π Description regreSSHion-checker is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This tool facilitates rapid scanning of multiple IP...
Cve-2024-38063
CVE-2024-38063 Description This repository contains details and potential exploit code for CVE-2024-38063, a critical Windows TCP/IP Remote Code Execution RCE vulnerability. The vulnerability allows an unauthenticated attacker to execute arbitrary code on the target system through specially craft...
CVE-2023-23752
CVE-2023-23752 Joomla Unauthorized Access Vulnerability fofa: product="Joomla" Usage root@kitploit: usage: CVE-2023-23752.py -h -u URL -f FILE -t THREAD -T TIMEOUT -o OUTPUT optional arguments: -h, --help show this help message and exit -u URL, --url URL Target urle.g. url.txt -f FILE, --file FIL...
CVE-2020-9496
CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...
CVE-2024-1071-PoC-Script
CVE-2024-1071 Exploit Script π π Disclaimer This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end userβs responsibility to obey all applicable local, state, and federal...
CVE-2026-48908-by-yora
π CVE-2026-48908 Scanner & Safe PoC Joomla SP Page Builder β Unauthenticated File Upload / Potential RCE Developed byyora π About This project is a security research and vulnerability detection tool developed by yora to help identify CVE-2026-48908 affecting SP Page Builder for Joomla. The...
CVE-2017-3881-exploit-cisco-
A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...
CVE-2022-41272
CVE-2022-41272 On this repository, we will briefly write information about the CVE-2022-41272 vulnerability. The vulnerability exists on the SAP P4 service that runs on the 5NN04 port. Where NN is an instance number, that can be from 00-99. There are remote call functions that an attacker can cal...
unauthorized-tools
unauthorized-tools Unauthorized Batch Detection Script mongo unauthorized python mongounauth.py ip.txt...
CVE-2024-9932
CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Arbitrary File Upload Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This...