CVE-2025-11740

This repository does not have a README...

CVE-2025-32463

CVE-2025-32463 Exploit This is the exploit for the CVE-2025-32463 Thanks to Rich Mirch @0xm1rch on X @ Stratascale for reporting this amazing vulnerability. Original Post: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 Affected Versions Vulnerable builds o...

CVE-2025-1913-PoC

CVE-2025-1913 -- Proof of Concept PoC This repository contains an educational-only Proof of Concept PoC for CVE-2025-1913 , created by Suhaib518 🇸🇦. This PoC demonstrates how specially crafted serialized PHP input may trigger vulnerable logic in affected WordPress components. The PoC is safe and...

CVE-2025-68926-repo

CVE-2025-68926-repo Script and node.proto for exploit CVE-2025-68926...

Flowise-RCE

Flowise-RCE CVE-2025-58434 & CVE-2025-59528...

CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability A Docker-based reproduction environment to reproduce the path traversal vulnerability CVE-2025-55752 in Apache Tomcat 10.1.44. Overview CVE-2025-55752 is a path traversal vulnerability in the RewriteValve component of Apache Tomcat, cause...

CVE-2025-2304

CVE-2025-2304 POC for CVE-2025-2304...

CSRF-via-stored-XSS-for-PrivEsc

Chamilo LMS addLabelgetlang'Thread', $threadEntity-getTitle; 2. /public/main/forum/viewforum.php - Line 369 root@kitploit: .$thread-getTitle.''; 3. There are more! Root Cause: Forum thread titles are stored without proper sanitization Thread titles are displayed without HTML escaping in multiple...

cve-2025-15467

cve-2025-15467 Exploit script for cve-2025-15467...

CVE-2025-32434-exploit

Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...

CVE-2025-24813_POC

CVE-2025-24813POC CVE-2025-24813POC Remote detection PoC, using dnslog to determine the exploitation result For learning and communication only, do not use for illegal purposes...

Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC This package allows: 1. Upload webshell to SharePoint 2. Extract ValidationKey 3. Generate signed ViewState 4. RCE via reverse/bind shell 🔧 Setup root@kitploit: git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Running Upload the webshell Fro...

CVE-2025-48384-POC

This repository does not have a README...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path root@kitploit...

CVE-2025-5777

Thanks to WatchTowr and Nocerainfosec for the great POCS. This is a powershell version that was needed in our environment...

Vulnerable-Lab-NextJS-CVE-2025-29927

Next.js Docker Hello World A simple Hello World application using Next.js 12.2 and Docker. Prerequisites Docker Building and Running the Application 1. Build the Docker image: root@kitploit: docker build -t nextjs-docker-hello . 2. Run the container: root@kitploit: docker run -p 3000:3000...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39...

CVE-2025-64459-hunter

CVE-2025-64459-hunter Fast network scanner for CVE-2025-64459 Django SQL Injection vulnerability. Installation root@kitploit: pip install -r requirements.txt Usage root@kitploit: Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t...

repo

Malicious Repo for CVE-2025-65964...

CVE-2025-32463

CVE-2025-32463chwoot Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot...