telnetd_CVE-2026-24061_tester

Telnetd CVE-2026-24061 Test Script A Python security testing tool to detect vulnerability to environment variable injection in telnetd servers via the NEW-ENVIRON telnet option. Overview This script tests telnetd servers for CVE-2026-24061 , a vulnerability that allows attackers to inject...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE For educational and authorized security research purposes only. Description Pre-authenticated Remote Code Execution in Marimo = 0.20.4. The WebSocket endpoint /terminal/ws skips authentication validation, allowing an unauthenticated attacker to obtain a full...

AA Discord Audit

aa-discord-audit Auditoría de conciliación para la integración de Discord de Alliance Auth. Compara las asignaciones reales de roles en el gremio de Discord configurado con el estado expresado en Alliance Auth Grupos + Estado por usuario y cierra la brecha mediante la cual los moderadores pueden...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth infinite loop / remote DoS. Description attributeenumerate in src/libradius/radiusmessage.c:247-271 accepts RADIUS attributes whose length byte is smaller than sizeofrattrt 2. For length == 0: data-len = next-length - sizeofrattrt...

CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127-Cisco SD-WAN Pre-Authentication Remote Code Execution Overview This repository contains a proof-of-concept PoC exploit for CVE-2026-20127 , a critical pre-authentication remote code execution RCE vulnerability affecting Cisco Catalyst SD-WAN Controller formerly vSmart and Cisco...

day10-nextjs-middleware-lab

Day 10 — Next.js middleware auth-bypass lab CVE-2025-29927 simulation Important: Educational lab only. Run locally in Docker. Quickstart: root@kitploit: npm i build from repo root with files above docker build -t day10-nextjs-lab . run docker run --rm -d -p 8080:3000 --name day10 day10-nextjs-lab...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Run python cve-2022-23131.py https://www.example.com Admin Use the exp to generate signedsession, replace the cookie, then click Sign in with Single Sign-On SAML Default is Admin Act responsibly, you bear the consequences A chance encounter, a...

watchTowr-vs-SysAid-PreAuth-RCE-Chain

SysAid PreAuth RCE Chain PoC PoC for SysAid PreAuth RCE Chain CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778 See our blog post for technical details https://github.com/user-attachments/assets/03245fab-915d-43b6-8e91-f0a18251af49 PoC in Action root@kitploit: python...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 developed by @watchTowr to achieve Remote Code Execution in Juniper JunOS within SRX and EX Series products. Follow the watchTo...

CVE-2024-40711

CVE-2024-40711 Veeam Backup & Replication 预认证反序列化漏洞 CVE-2024-40711 的利用程序 技术细节请参阅我们的博客文章 https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC 演示 root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Veeam -c http://192.168.201.1:8000/trigger --targetveeam...

CVE-2026-65761

CVE-2026-65761 — EasyStore Joomla Pre-Auth SQL Injection filtersortby Direction → ORDER BY Injection → Full DB Read Overview CVE-2026-65761 CVSS 9.3 Critical is an unauthenticated SQL injection in EasyStore for Joomla by JoomShaper, affecting versions ≤ 2.0.1. The filtersortby product listing...

CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — JFrog Artifactory unauthenticated auth bypass → admin takeover CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · disclosed 2026-08-28 · exploited in the wild. An unauthenticated, network-adjacent attacker mints a platform administrator access token against a default...

CVE-2016-7434

CVE-2016-7434 CVE-2016-7434 ntpd remote pre-auth Denial of Service PoC's/info Sources: http://dumpco.re/cve-2016-7434/ https://www.exploit-db.com/exploits/40806/ root@nop:/code/CVE-2016-7434 echo -e...

CVE-2021-43799

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

F5-BIG-IP-exploit

F5-BIG-IP exploit CVE-2022-1388 usage: CVE-2022-1388.py -h -u URL -c COMMAND -f FILE CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE Eg: root@kitploit: python3 CVE-2022-1388.py -u https://127.0.0.1 python3 CVE-2022-1388.py -u https://127.0.0.1 -c 'cat /etc/passwd' python3 CVE-2022-1388.py -...

CVE-2017-3143

TSIG Bypass exploit Exploit for CVE-2017-3143 in Bind and CVE-2017-11104 in Knot DNS. See https://www.synacktiv.com/ressources/CVE-2017-3143BIND9TSIGdynamicupdatesvulnerabilitySynacktiv.pdf for more info. Author Clément Berthaux - clement dot berthaux at synacktiv dot com...

DEBIAN-CVE-2026-91716

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91716

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-61554

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send...