Dirty-Pipe-Oneshot

Dirty-Pipe-Oneshot Compiled version of CVE-2022-0847 aka Dirty Pipe. Just one shot to root them all :D just comple the cve-2022-0847.c file root@kitploit: gcc cve-2022-0847.c -o getroot then execute it on the victim & get root :D root@kitploit: ./getroot /etc/passwd 1 ootz: Happy Rooting 🎭...

CVE-2026-79941

creationtimestamp| type| source ---|---|--- 2026-09-10 03:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv53suqsbe2y...

nextjs-cve-2026-23870-checker

@emstack/nextjs-cve-2026-23870-checker CLI checker and fixer for all 13 vulnerabilities in the Next.js May 2026 Security Release, including CVE-2026-23870 DoS in React Server Components. Quickstart root@kitploit: Interactive mode recommended npx @emstack/nextjs-cve-2026-23870-checker Check a...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Mode Of Use root@kitploit: ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se...

acropalypse-reconstructor

Acropalypse CLI Multi-Tool A lightweight, headless Python script designed to detect and reconstruct cropped images that are vulnerable to the Acropalypse vulnerability CVE-2023-21036 for Google Pixel Markup and CVE-2023-28303 for Windows Snipping Tool. This tool allows you to recover trailing pix...

SecBugs

Security Bugs Full disclosures for CVE ids, proofs of concept, exploits, 0day bugs and so on...

jetty_9.4.31_CVE-2023-26048

Eclipse Jetty Canonical Repository This is the canonical repository for the Jetty project, feel free to fork and contribute now! Submitting a patch or pull request? Make sure you have an Eclipse Contributor Agreement ECA on file. eclipse.org/legal/ecafaq Project description Jetty is a lightweight...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219

This repository does not have a README...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 Woori FISA Technical Seminar 6th - Team 3: Analysis and research on React2Shell, a remote code execution RCE vulnerability exploiting design flaws in React Server Component RSC Team...

MSHTMHell

MSHTMHell: Malicious document builder for CVE-2021-40444...

cve-2017-5638

cve-2017-5638 Reference1 Reference2 Reference3 Reference4...

sudowp-dropzone-elementor

SudoWP DropZone for Elementor Contributors: SudoWP, WP Republic Original Authors: WEB-SHOP-HOSTING Tags: elementor, dropzone, upload, security-patch, fork, cve-2024-5153, honeypot Requires at least: 5.6 Tested up to: 6.7 Stable tag: 1.7.17 License: GPLv2 or later Security Notice This is a...

CVE-2025-9974

CVE-2025-9974 PoC !CAUTION This script is provided for educational and defensive research purposes only. It is designed strictly for use against owned hardware in isolated, sandboxed testing environments. Do not use this tool against systems you do not own or have explicit permission to test. The...

SmarterMail-CVE-2026-24423

SmarterMail ConnectToHub RCE A Python-based exploit for CVE-2026-24423 , an unauthenticated Remote Code Execution vulnerability in SmarterTools SmarterMail's ConnectToHub functionality. Intended use: Authorized security testing, CTFs, Hack The Box labs, and controlled research environments only...

POC-CVE-2026-0769

Description Usage python3 poc.py -u -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The bash output is stored in out within the build scope and isn't...

POC-CVE-2026-0768

Description Proof of concept exploit code for CVE-2026-0768 Usage python3 poc.py -u -c...

CVE-2023-33246

This repository does not have a README...

artifactory-CVE-2026-82329-poc.py

This repository does not have a README...

CVE-2017-12615-EXP

CVE-2017-12615-EXP root@kitploit: .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !:...

CVE-2020-1938TomcatAjpScanner

CVE-2020-1938TomcatAjpScanner Batch scan for Tomcat AJP vulnerability Vulnerability Details On January 6, 2020, the National Information Security Vulnerability Sharing Platform CNVD included the Apache Tomcat file inclusion vulnerability CNVD-2020-10487, corresponding to CVE-2020-1938. Attackers...