CVE-2026-21110

Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code...

CVE-2026-21102

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

CVE-2026-21104

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2026-21101

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21087

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege...

ecp_slap

ecpslap 本概念验证工具针对 CVE-2020-0688，包含扫描和利用存在漏洞的本地 Exchange 实例的功能。 用法 scan — 提供凭据和目标信息，获取漏洞利用所需的 Cookie 并将其保存至 'cookies.txt'。同时检查目标 Exchange 服务器的 Exchange 控制面板（ECP）服务是否暴露，尝试对该服务进行身份验证，并检查是否匹配正确的 VIEWSTATEGENERATOR 值。若身份验证成功，将显示用于创建序列化有效载荷的会话 Cookie 值。 generate — 提供从 'scan' 功能获取的会话 Cookie...

CVE-2019-0708-RCE

CVE-2019-0708-RCE CVE-2019-0708-RCE Estamos trabajando en un exploit totalmente funcional, únete a nosotros https://discord.gg/4kc72bZ...

CVE-2021-3129

CVE-2021-3129 Laravel = v8.4.2 modo debug: Ejecución remota de código CVE-2021-3129 Modificado a partir del trabajo de @crisprss en https://github.com/crisprss/LaravelCVE-2021-3129EXP, se agregaron más gadgets disponibles para explotación. Uso: root@kitploit: python3 exp.py http://127.0.0.1:8888...

CVE-2020-5902

Readme F5 BIG-IP arbitrary file read + remote command execution RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...

CVE-2018-7600-Drupal-POC-EXP

+----------------------------------------------------------------------+ DES: by zhzyker as https://github.com/zhzyker/exphub + root@kitploit: Drupal Drupalgeddon 2 ejecución remota de código CVE-2018-7600 + +----------------------------------------------------------------------+ USE: python3 +...

Log4j-Rec-CVE-2021-44228

Log4j2复现笔记，仅供学习 参考https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce 创建可执行文件 root@kitploit: com/example/template javac Log4jRCE.java 启动Python自带的HTTP服务器 root@kitploit: com/example/template python -m http.server 8888 启动LDAP服务器 root@kitploit: tools java -cp...

CVE-2021-31166

CVE-2021-31166 0x00. 描述 这是 CVE-2021-31166（“HTTP 协议栈远程代码执行漏洞”）的概念验证代码，该漏洞是 http.sys 中一个释放后使用（use-after-free）解引用漏洞，微软已于 2021 年 5 月发布补丁。 据我所知，它只能触发程序崩溃，请谨慎使用。 0x01. 影响范围 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...

cve-2021-44228-log4shell_rce_reproduction

CVE-2021-44228 — Log4Shell: Ejecución Remota de Código en Apache Log4j2 CVSS 10.0 CRÍTICO | CWE-502: Deserialización de Datos No Confiables | CWE-917: Neutralización Incorrecta para Inyección de Lenguaje de Expresión Resumen Log4Shell CVE-2021-44228 es posiblemente la vulnerabilidad más grave de ...

EUVD-2026-74651

Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code...

CVE-2026-21110

CVE-2026-21110 is an out-of-bounds write vulnerability in libsavscmn.so affecting Samsung devices running One UI prior to 8.5 . A local attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the vulnerable system. The CVSS 4.0 base score is 6.9 (MEDIUM) , reflec...

CVE-2026-21110

Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code...

EUVD-2026-74645

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...