Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021 — CVE-2018-8021 Proof-Of-Concept and Exploit | Kitploit
Tools/GitHubGitHub/r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubr3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021

Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

CVE-2018-8021 Proof-Of-Concept and Exploit

View Repository
10417137 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Apache Superset pickle library code execution

IBM : Apache Superset could allow a remote attacker to execute arbitrary code on the system, caused by the use of unsafe load method from the pickle library to deserialize data. By sending specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Refs :

  • https://github.com/apache/incubator-superset/pull/4243
  • https://nvd.nist.gov/vuln/detail/CVE-2018-8021
  • https://exchange.xforce.ibmcloud.com/vulnerabilities/152702

Usage :

root@kitploit:~
usage: exploit.py [-h] -t TCP -tp TPORT -i IP -p PORT -U USER -P PASSW

optional arguments:
  -h, --help            show this help message and exit
  -t TCP, --tcp TCP     tcp ip for shell
  -tp TPORT, --tport TPORT
                        tcp port for shell
  -i IP, --ip IP        ip
  -p PORT, --port PORT  port
  -U USER, --user USER  User belong to Superset 
  -P PASSW, --passw PASSW
                        password of the user !

Note : User and Pass Must belong to a user that can import Dashboards on Superset!!!

Creadits

Please Note Original PoC has been written by David May [[email protected]][https://github.com/DavidMay121]

Download Tool