CVE-2016-2107

CVE-2016-2107 Simple test for the May 2016 OpenSSL padding oracle CVE-2016-2107 Installation root@kitploit: $ go version go version go1.6.2 darwin/amd64 $ go get github.com/FiloSottile/CVE-2016-2107 This tool only builds with Go 1.6+, and only when downloaded to the right position in the $GOPATH...

CVE-2024-32002-PoC

CVE-2024-32002-PoC Proof of Concept for CVE-2024-32002 main repo for cloning: https://github.com/th4s1s/better-sqlite hook repo for hooking: https://github.com/th4s1s/hook...

nginx-map-risk-audit

CVE-2026-42533: NGINX Map Regex Risk Review Defensive research note on CVE-2026-42533, a heap buffer overflow in NGINX request processing tied to map directives with regex captures and certain variable evaluation patterns. In plain English: NGINX is web server and reverse proxy software. It often...

Ubuntu-Gnome-privilege-escalation

Ubuntu-Gnome-privilege-escalation A bash script exploit of CVE-2020-16126/CVE-2020-16127 to achieve privilege escalation. 一个可以方便实现Ubuntu本地提权的bash脚本（利用CVE-2020-16126/CVE-2020-16127漏洞），要求处于Gnome环境。 Affect version Ubuntu 20.04.1\20.10\18.04\16.04 LTS and so on Usage curl...

CVE-2023-25136

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...

CallStranger

CallStranger This script created by Yunus Çadırcı https://twitter.com/yunuscadirci to check against CallStranger CVE-2020-12695 vulnerability. An attacker can use this vulnerability for: Bypassing DLP for exfiltrating data Using millions of Internet-facing UPnP device as source of amplified...

Laravel-CVE-2021-3129

Laravel-CVE-2021-3129 CVE-2021-3129 Description Integrates https://github.com/zhzyker/CVE-2021-3129 and https://github.com/SNCKER/CVE-2021-3129. This project has the following advantages: Retains custom command functionality New: automatically exit after successful exploitation, improving...

phuip-fpizdam

PHuiP-FPizdaM 这是什么 这是 php-fpm 中一个漏洞（CVE-2019-11043）的利用程序。在某些 nginx + php-fpm 配置下，该漏洞可从外部触发。这意味着如果你的配置存在风险（参见下方），则 Web 用户可能获得代码执行权限。 技术分析 虽然我们懒得写分析文章，但 Orange Tsai 在他的博客中发布了一篇完美的分析。向他致敬。 另外，我在 ZeroNights 2019 的幻灯片在此提供。 什么情况会受影响 如果 Web 服务器运行 nginx + php-fpm，并且 nginx 的配置类似于： root@kitploit: location...

CVE-2018-15473-Exploit

CVE-2018-15473-Exploit On August 15th, 2018, the following advisory was posted on the OSS-Security list: http://openwall.com/lists/oss-security/2018/08/15/5 The ShelIntel team decided to invest some time and write an exploit for this vulnerability. The exploit below has the following features:...

Ghostcat-CNVD-2020-10487

Ghostcat exp for CNVD-2020-10487CVE-2020-1938 tomcat ajp协议任意属性设置导致的文件读取和文件执行。 漏洞分析 代码仅供安全测试，请勿用于非法用途,造成的后果使用者负责与本人无关！！！ root@kitploit: python3 ajpShooter.py -h /\ / \ | | | //\ | | ' \ \ | ' \ / \ / | / \ '| / | | | | \ \ | | | | | || / | / // | ./ /| ||/ / \|| |/|| 00theway,just for test...

westone-CVE-2021-21980-scanner

westone-CVE-2021-21980-scanner VMware vCenter earlier versions 7.0.2.00100 has unauthorized arbitrary file read + ssrf + xss vulnerability Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2021-21980-scanner cmd CVE-2021-21980.exe...

weblogicScanner

source: https://github.com/rabbitmask/WeblogicScan weblogicScaner 简体中文 | English As of November 27, 2020, weblogic Vulnerability Scanning Tool. If there is an unrecorded and open POC vulnerability, please submit issue. Some bug fixes were made, some POC did not take effect, or configuration error...

MOODLE-3.X-Remote-Code-Execution

MOODLE-3.X-Remote-Code-Execution cve-2018-1133 moodle athenticated as teacher remote code execution...

CVE-2019-7839

This repository does not have a README...

-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212

create a vulnerable Docker environment that is susceptible to CVE 2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...

lua_CVE-2020-24370_AfterPatch

Lua 5.3 readme blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Welcome to Lua 5.3 about · installation · changes · license · reference manual Abo...

CVE-2026-1814

This repository does not have a README...

CVE

Security Research Public vulnerability reports by JunZ-Leo. Published CVE reports Both records below are published in the CVE List and credit JunzLeo VulDB User as the reporter. They were published on April 28, 2025...

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

apple-positional-audio-codec-invalid-header

Proof-of-concept for the CoreAudio patch CVE-2025-31200 in iOS 18.4.1. Write-up here https://blog.noahhw.dev/posts/cve-2025-31200/. Update 05/27/2025 I have been able to push this to a controlled if not arbitrary write. The writeup is coming soon. In order to see for yourself though, you'll have ...