D-Link-CVE-2021-27342-exploit

D-Link-CVE-2021-27342-exploit CVE-2021-27342脆弱性のエクスプロイト（telnet認証のブルートフォース保護バイパス）...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

CVE-2018-17961

construir la imagen ejecutar el contenedor con reenvío de puertos conectarse mediante ssh -X ejecutar evince executeonlybypass.ps verificar que el exploit se ha escrito en /.bashrc...

CVE-2026-75865 WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

EUVD-2026-68931

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

CVE-2026-75865

WPLP Cookie Consent (a WordPress plugin for GDPR/CCPA consent management) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.4.1 . The root cause combines missing file type validation in the saas_upload_logo() function with an authorization bypass on the ...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE 此 PoC 演示了攻击者如何将 Orange Tsai 的 CVE-2024-4577 与 DNS 重绑定链式结合，通过受害者的网页浏览器直接对内部网络基础设施实现远程代码执行。通过绕过 同源策略（SOP） 并利用运行在 本地 XAMPP 服务器、内部开发环境或企业网络上的易受攻击的 PHP-CGI 实例，该攻击能够在原本不应暴露于互联网的系统上实现完整的代码执行。 BLOG...

CVE-2024-38821-POC

CVE-2024-38821：概念验证（PoC）：Spring Framework 中的认证绕过 这是针对 CVE-2024-38821 漏洞的概念验证 执行步骤 1. 构建 Docker 镜像（基于 Spring Framework 6.1.13 的 Spring Boot 3.3.4） root@kitploit: cd vuln docker build -t cve-2024-38821-poc . 2. 运行容器并将主机的端口 8080 暴露给容器 root@kitploit: docker run -d -p 8080:8080 --name cve-2024-38821-p...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

自定义漏洞利用：Foxit Reader 9.0.1.1049 版本中的释放后重用漏洞及绕过 ASLR 和 DEP 的堆利用 我的自定义漏洞利用：Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 针对 Win 7 的自定义利用 留有 shellcode 空间 我的自定义 ROP 链在堆中为 shellcode 腾出空间 针对 Win 7...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass 我的版本 - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

EUVD-2026-68927

Improper Input Validation vulnerability in ash-project ashtypescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ashtypescript/typedcontroller/requesthandler.ex calls...

CVE-2026-82732

ash_typescript (versions 0.15.0 through before 0.18.0) contains an improper input validation flaw in AshTypescript.TypedController.RequestHandler. The handler calls Ash.Type.cast_input/3 to coerce input but never invokes Ash.Type.apply_constraints/3, rendering declared constraints (one_of, max_le...

CVE-2026-82732 Declared argument constraints not enforced on AshTypescript typed controller routes

Improper Input Validation vulnerability in ash-project ashtypescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ashtypescript/typedcontroller/requesthandler.ex calls...

EEF-CVE-2026-82732 Declared argument constraints not enforced on AshTypescript typed controller routes

Summary Improper Input Validation vulnerability in ash-project ashtypescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ashtypescript/typedcontroller/requesthandler.ex cal...

CVE-2026-82732 Declared argument constraints not enforced on AshTypescript typed controller routes

Improper Input Validation vulnerability in ash-project ashtypescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ashtypescript/typedcontroller/requesthandler.ex calls...

CVE-2024-25277

CVE-2024-25277 在 MW45APT02.0002 上发现 资源和 PoC 此仓库收录了在分析及发现 CVE-2024-25277 过程中收集的脚本和 PoC。 更多关于该发现的信息请查阅：https://blog.maentechie.com/bypass-rate-limiting-in-tcl-mw45ad-to-achieve-privileges-escalation 发现的问题摘要 速率限制绕过 硬编码令牌和密钥 弱加密 权限提升...

bouncy-castle-generative-test-poc

Bouncy Castle 漏洞 CVE-2020-28052 的生成式测试 运行测试 测试存在漏洞的版本（默认为 1.66） root@kitploit: $ clojure -M:test $ clojure -M:test:v1.65 测试漏洞引入前的版本以及补丁后的版本 1.67 root@kitploit: $ clojure -M:test:v1.64 $ clojure -M:test:patched 链接 https://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle/...

CVE-2021-21551

PoC para CVE-2021-21551 LPE en Windows mediante el controlador Dell dbutil23.sys. Enfoque del exploit Implementar lectura/escritura, asignar shellcode, voltear la página para evadir SMEP, sobrescribir el puntero haldispatch, ejecutar shellcode...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Bypass no autorizado RCE de Weblogic CVE-2020-14882 Script de prueba de bypass no autorizado RCE de Oracle Weblogic Funciona en Python3 Solicitudes root@kitploit: POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: Vulnerabilidad RCE en ADSelfService Plus 1. Descripción de la vulnerabilidad ZOHO ManageEngine ADSelfService Plus es la solución integrada de gestión de contraseñas de autoservicio e inicio de sesión único de ZOHO para Active Directory y aplicaciones en la nube...