1308255 matches found
CVE-2010-3600-PythonHackOracle11gR2
This repository does not have a README...
Log4shell
Log4J lab Description This is a lab for playing around with the Log4J CVE-2021-44228 Springboot app + Log4J 2.6.1 Usage root@kitploit: docker build . -t mylog && docker run --rm -p 8081:8080 --name mylog-app mylog...
Apache-Struts-Shodan-Exploit
APACHE STRUTS SHODAN EXPLOIT POC Author: @037 Original code can be found here. This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers. Shodan search parameter has been left out to weed out any skids trying to use this...
CVE-2023-2033
Exploit for CVE-2023-2033...
CVE-2019-18634
CVE-2019-18634 ā ļø This code has only been tested on sudo 1.8.25. The bug impacts 1.8.30, but there are differences in character handling that prevent this PoC from executing this does not mitigate the exploitability of the bug. See 1 ā ļø Functional exploit for CVE-2019-18634, a heap buffer overflow...
fortios-auth-bypass-poc-CVE-2024-55591
CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action root@kitploit: python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \ \ / / \ \ / | | \| | / ...
MS16-032
MS16-032CVE-2016-0099 for SERVICE ONLY this exploit can only use on SERVICE do logical exploit,on logical exploits...
Linux-Privilege-Escalation-using-Sudo-Rights
Linux-Privilege-Escalation-using-Sudo-Rights CVE-2019-14287...
CVE-2017-9805-Exploit
This repository does not have a README...
CVE-2026-89099
creationtimestamp| type| source ---|---|--- 2026-09-14 12:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvi3ca5sl224 2026-09-14 14:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...
CVE-2022-2602-Study
This repository does not have a README...
exploit-CVE-2023-23752
Joomla! information disclosure - CVE-2023-23752 exploit Joomla! 4.2.8 - Unauthenticated information disclosure Exploit for CVE-2023-23752 4.0.0 = Joomla = 4.2.7. EDB-51334 PacketStorm WLB-TODO Usage Example Requirements httpx docopt.rb paint Example using gem: root@kitploit: gem install httpx...
NextSploit
š NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ā ļø NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...
IngressNightmare-POCs
IngressNightmare-POCs CVE-2025-24513: https://github.com/kubernetes/kubernetes/issues/131005 CVE-2025-24514: https://github.com/kubernetes/kubernetes/issues/131006 CVE-2025-1097: https://github.com/kubernetes/kubernetes/issues/131007 CVE-2025-1098:...
metasploitable3-pentest-writeup
Metasploitable3 ā Penetration Test Report Author: Arlen Fortunato Date: September 2026 Environment: Parrot OS attacker ā Metasploitable3 Ubuntu 14.04 target Scope: Full network penetration test ā enumeration, exploitation, privesc, post-exploitation Type: Home Lab / Capture The Flag Practice ā ļø Al...
Zimbra-CVE-2017-8802-Hotifx
CVE-2017-8802 This Zimlet fixes CVE-2017-8802 by disabling the "Show Fragment" / Snippet functionality. For further information see: https://wiki.zimbra.com/wiki/ZimbraSecurityAdvisories How to deploy Zimlets https://www.zimbra.com/docs/os/6.0.10/administrationguide/Zimlets.11.4.html...
Prove-CVE-2021-44228
This repository does not have a README...
RLSA-2026:67278 Moderate: perl:5.32 security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...
CVE-2025-6019-udisks-lpe-no-image
CVE-2025-6019-udisks-lpe-no-image Script-only privilege escalation chain using CVE-2025-6019 and UDisks2 no filesystem image included. Credits, Context & Exploit Chain This repository does not introduce a new vulnerability. The privilege-escalation technique implemented here is fully based on...