198321 matches found
CVE-2025-5777-POC
CVE-2025-5777-POC...
CVE-2025-3102
This repository does not have a README...
CVE-2025-31258-PoC
CVE-2025-31258-PoC 1day practice - Escape sandbox partial using RemoteViewServices...
CVE-2025-49844
This repository does not have a README...
NextSploit
🔍 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ⚠️ NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...
WP-Links-Page-CVE-Report
WP-Links-Page-CVE-Report Disclosure for CVE-2025-10175 CVE-2025-10175 - Vulnerability in WP Links Page This repository discloses a vulnerability discovered in WP Links Page = 4.9.6,WordPress plugin developed by Rico Macchi. 🛠 Affected Version Product : WP Links Page Version : v4.9.6 URL :...
CVE-2025-8088-Exploit
CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...
IngressNightmare-POCs
IngressNightmare-POCs CVE-2025-24513: https://github.com/kubernetes/kubernetes/issues/131005 CVE-2025-24514: https://github.com/kubernetes/kubernetes/issues/131006 CVE-2025-1097: https://github.com/kubernetes/kubernetes/issues/131007 CVE-2025-1098:...
CVE-2025-48384
CVE-2025-48384 This is a readme file...
poc-cve-next
PoC for Next.js Vulnerability. Credits where credits are due. This was written in go but I got inspiration from: github.com/namest504/CVE-2025-66478 For more info visit that repo. Cheers! Disclaimer This code is provided for security research and educational purposes only. Using this tool against...
essential-addons-for-elementor-xss-poc
🔍 Detector de Vulnerabilidad XSS en Essential Addons for Elementor 🚨 Información Crítica Esta herramienta es solo para fines de investigación y parcheo de seguridad. No la utilice para dañar sitios. Si encuentra sitios vulnerables, repórtelos de manera responsable a los propietarios para que pued...
CVE-langgraph
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...
CVE-2025-52691-PoC-SmarterMail-authentication-bypass-exploit-WT-2026-0001
CVE-2025-52691 / WT-2026-0001 SmarterMail Exploit 🚨 IMPORTANT NOTICE This tool is for authorized security testing and educational purposes only! Unauthorized use is illegal and unethical Only use on systems with explicit authorization Use at your own risk Users are responsible for compliance with...
MSC-EvilTwin-Local-Privilege-Escalation
CVE-2025-26633 - Microsoft Management Console .msc EvilTwin Local Privilege Escalation PoC Zero-day at time of disclosure March 2025 – Actively exploited in the wild by Water Gamayun APT ONLY FOR AUTHORIZED SECURITY TESTING AND RESEARCH Vulnerability Details Exploit Title : Microsoft Management...
CVE-2025-24893-PoC
Disclaimer: The vulnerabilities and reproduction steps described in this document are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no...
CVE-2025-24813
Testing any tomcat version to see whether that version is vulnerable to CVE-2025-24813 This POC allow you to test any tomcat version to verify whether that version is vulnerable to CVE-2025-24813 under the vulnerable conditions, in Unix environments tested on a Ubuntu machine. Note: tested using...
ROOT-OS-DEBIAN-12-CVE-2025-59375 CVE-2025-59375 in expat - Patched by Root
Root has patched CVE-2025-59375 in the expat package for Root:Debian:12. Multiple fixed versions available...
react2shell
React2Shell CLI tool + Nuclei templates for detecting two critical RCE vulnerabilities in React Server Components and Next.js Server Actions. The scanner was rewritten based on the disclosed react2shell vuln. Vulnerability Overview CVE-2025-55182 – React Server Components Deserialization RCE A fl...
CVE-2025-32433-Remote-Shell
CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-32433 returning a remote bash shell. Heavily inspired by understanding of exploit derived from ProDefense's PoC for CVE-2025-32433. Running the Exploit root@kitploit: make exploit.exe is also made available for Windows machines by the...