CVE-2024-41817-poc

ImageMagick Ejecución Arbitraria de Código CVE-2024-41817 Exploit de Prueba de Concepto para versiones de ImageMagick = 9.4.0 Paquetes de Python: paramiko Instalación root@kitploit: git clone https://github.com/Dxsk/CVE-2024-41817-poc/ cd CVE-2024-41817-poc pip install -r requirements.txt Uso...

PT-2026-90718

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

PT-2026-90780

My 4th official CVE is now assigned: 🔐 Notepad++ 🐞 Stack-based Buffer Overflow ⚠️ High Severity 💥 CVE-2026-85279 A vulnerability in the plugin loading mechanism leading to potential arbitrary code execution. The comeback continues. 🗿🔥 CyberSecurity CVE BugBounty https://t.co/RiRptj80NP...

Linux Distros Unpatched Vulnerability : CVE-2026-90558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit...

CVE-2024-3094-check

CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use root@kitploit: curl -fsSL...

CVE-2026-89688

A flaw was found in the Linux kernel's nfsd component. During a seqidop replay retry, the system incorrectly handles reference counts for stateowners, leading to a reference count underflow and a use-after-free vulnerability. This issue could allow an attacker to potentially cause a denial of...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 Este es un programa Java que explota la vulnerabilidad Spring Break CVE-2017-8046. Este software está escrito para tener la menor cantidad de dependencias externas posible. AVISO LEGAL Esta herramienta está destinada a ingenieros de seguridad y profesionales de appsec pa...

CABTrap_OneNote2007

CABTrapOneNote2007 Microsoft Office OneNote 2007 CVE-2014-2815 Vulnerabilidad de recorrido de directorio en archivos ".ONEPKG" que conduce a la ejecución arbitraria de código Microsoft Office OneNote 2007 CVE-2014-2815 Vulnerabilidad de recorrido de directorio en archivos ".ONEPKG" que conduce a ...

CVE-2026-89495

A flaw was found in ocfs2 in the Linux kernel. A malicious or compromised node within a Distributed Lock Manager DLM cluster can send specially crafted messages with unchecked length fields. This can lead to a heap out-of-bounds write, potentially allowing for arbitrary code execution, or an...

CVE-2026-48490

ArduinoCore-avr (the source code and configuration files of the Arduino AVR Boards platform) contains a stack-based buffer overflow in its floating-point concatenation path. Versions prior to 1.8.8 are affected. Passing values near the extremes of the float or double range to String::concat(float...

CVE-2021-44852

CVE-2021-44852 Se descubrió un problema en BSRCIO64.sys en Biostar RACING GT Evo 2.1.1905.1700. Un proceso de baja integridad puede abrir el objeto de dispositivo del controlador y emitir IOCTLs para leer o escribir en ubicaciones de memoria física arbitrarias o llamar a una dirección arbitraria,...

CVE-2023-38831-Exploit

Generador de Exploit CVE-2023-38831 para WinRAR Creado por: technicalcorp Este proyecto contiene un script en Python que explota CVE-2023-38831 , una vulnerabilidad en WinRAR versiones anteriores a la 6.23. El exploit genera un archivo RAR malicioso que desencadena la ejecución de código arbitrar...

CVE-2025-55182-realistic-poc

CVE-2025-55182: Ejecución remota de código en React Server Components Una prueba de concepto mínima que demuestra la vulnerabilidad crítica de ejecución remota de código en [email protected]. ¿Qué es CVE-2025-55182? Una vulnerabilidad de RCE sin autenticación previa en React Server Component...

CVE-2019-8601

Explotando CVE-2019-8601 Este es un exploit para una vulnerabilidad de WebKit que fue descubierta originalmente por Fluoroacetate durante la competencia pwn2own en Vancouver. Aunque no descubrí este error, escribí este exploit para practicar mis habilidades de desarrollo de exploits. El artículo...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Proof of Concept for researching CVE-2025-59528 in an isolated laboratory environment. !WARNING DISCLAIMER This project is intended strictly for educational purposes, security research, and testing systems that you own or have explicit authorization to test. Do not use this PoC...

VertXploit

VertXploit Explotación de los sistemas de control de acceso HID VertX y EDGE Resumen VertXploit es una herramienta que se puede utilizar para explotar los sistemas de control de acceso HID VertX y EDGE. Existe una vulnerabilidad en el servicio discoveryd, que no sanea los datos del usuario antes ...

CVE-2026-87985

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval...

CVE-2026-87986

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...

CVE-2026-87987

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause...

CVE-2026-87987

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks by placing environment variable assignments before allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to trigger c...