Linux-Privilege-Escalation-CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via Writable Symlink in below Summary This is a simple exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below Linux system monitoring tool. The vulnerability affects versions prior to v0.9.0 and stems from incorrect permission...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

vulnerability-spoiler-alert

Vulnerability Spoiler Alert Know about security patches before the CVE drops. View Live Site | Subscribe via RSS A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings...

CVE-2019-15107_webminRCE

CVE-2019-15107webminRCE unauthorized RcE exploit for webnin 1.920 modified version of https://github.com/jas502n/CVE-2019-15107 POC https://asciinema.org/a/YzMmXQyvZcsBF9OzccXxmHmyQ...

CVE-2024-38077-check

Vulnerability analysis asynchronous pdf file. My ability is limited, unable to achieve RCE yet. Please advise, masters. For vulnerability verification, just change the IP. root@kitploit: if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 How to Run the CVE-2021-41773-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this GitHub repo 3. Go to the Path Traversal folder 4. Run the following commands docker build -t cve-2021-41773-path-traversal . and docker run --rm -d...

minio_unauth_check

miniounauthcheck CVE-2023-28432, minio information disclosure detection tool This tool is for educational and research purposes only, to improve security awareness and enhance software development practices. Before using this tool, please ensure that you comply with relevant laws and regulations...

tvsz

CVE-2018-6389 PoC node js multisite with proxy This script is based on CVE-2018-6389, a rather insidious problem in Wordpress, which unfortunately will likely not be fixed by the team developing the platform, even though it has been known for quite some time. !!! IMPORTANT BEFORE YOU CONTINUE !!!...

CVE-2019-6263-Joomla-POC

CVE-2019-6263-Joomla-POC...

CVE-2020-1350

CVE-2020-1350 Scanner and Mitigator for CVE 2020-1350 How to run: 1- Run as Administrator windows commandline. 2- powershell -ExecutionPolicy Bypass -File CVE-2020-1350.ps1...

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 远程命令执行 该漏洞利用工具基于 https://www.exploit-db.com/exploits/43853 开发 它将针对OTRS面板进行认证并提供反向shell。 用法: python3 CVE-2017-16921.py CVE-2017-16921: 在OTRS 6.0.x至6.0.1版本、OTRS 5.0.x至5.0.24版本以及OTRS 4.0.x至4.0.26版本中，以代理身份登录OTRS的攻击者可以操纵表单参数（与PGP相关）并以OTRS或Web服务器用户的权限执行任意Shell命令。...

bazad5

bazad5 通过 CVE-2016-1828 实现 OS X 10.10.5 本地权限提升。...

CVE-2026-76675

creationtimestamp| type| source ---|---|--- 2026-09-15 20:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlhpb65ih2t 2026-09-15 22:11:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnfaerwu25...

Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...

CVE-2023-25690_lab

HTTP Request Smuggling via Apache proxy Environment Setup Infrastructure...

CVE-2011-3368

CVE-2011-3368 PoC Exploit. cve-2011-3368 Install: git clone https://github.com/colorblindpentester/CVE-2011-3368 cd CVE-2011-3368 python2 CVE-2011-3368.py Tested on: OS X macos Parrot OS Kali linux...

dlkploit600

DLKPloiT600.py Simple Python script for D-Link vulnerability scan and test CVE-2019-13101 https://nvd.nist.gov/vuln/detail/CVE-2019-13101 https://www.cvedetails.com/cve/CVE-2019-13101/ https://us.dlink.com/en/security-advisory https://www.dlink.com/en/security-bulletin Requirements: python3.x...

jetty_9.4.31_CVE-2021-34428

Eclipse Jetty Canonical Repository This is the canonical repository for the Jetty project, feel free to fork and contribute now! Submitting a patch or pull request? Make sure you have an Eclipse Contributor Agreement ECA on file. eclipse.org/legal/ecafaq Project description Jetty is a lightweight...

system_bt_AOSP10_r33_CVE-2021-0435

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...