libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

libxml2: libxml2: Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution

A flaw was found in libxml2. An integer overflow vulnerability exists in the xmlURIEscapeStr function within uri.c. This flaw could potentially lead to memory corruption, allowing an attacker to achieve information disclosure or arbitrary code execution...

CVE-2017-9841

CVE-2017-9841 Laravel-RCE: CVE-2017-9841 CVE-2017-9841 is a critical remote code execution RCE vulnerability that affects the PHPUnit library, widely used for automated testing in PHP. This flaw allows an attacker to execute arbitrary commands on the server if they can access a specific PHPUnit...

claude-project-scanner

Claude Project Scanner Read-only Claude Code skill that scans third-party projects for known security risks before you open them. Catches the attack patterns documented in: CVE-2025-59536 Claude Code Lifecycle Hooks injection CVE-2025-61260 OpenAI Codex CODEXHOME injection CVE-2025-54136 Cursor...

CVE-2016-5983

CVE-2016-5983 IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9 Link to Original Writeup Source: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Title: IBM WebSphere deserialization of untrusted data Application: IBM...

react2shell-CVE-2025-55182

Attack component contains the attack code. Just uncomment it and press the button to pefrom attach. To run your own code on server exploit simply change the value of prefix key in the payload. See the AttackString file for examples...

CVE-2025-8088

CVE-2025-8088 – WinRAR Exploit Este repositorio contiene un generador de archivos RAR maliciosos que abusa de la vulnerabilidad CVE-2025-8088 en WinRAR, permitiendo que un archivo aparentemente legítimo ejecute un payload cuando la víctima lo extrae. Comando recomendado root@kitploit: python3...

CVE-2024-32002-EXP

CVE-2024-32002-EXP root@kitploit: !/bin/bash 设置 Git 配置选项 git config --global protocol.file.allow always git config --global core.symlinks true 避免警告消息（设置默认分叉为main） git config --global init.defaultBranch main 定义 tell-tale 路径 telltalepath="$PWD/tell.tale" 初始化 hook 仓库 git init hook cd hook mkdir -p...

CVE-2025-49029

🚨 WordPress Custom Login And Signup Widget Plugin 🔥 Base Score: 9.1 CRITICAL CWE ID: CWE-94 – Improper Control of Generation of Code 'Code Injection' 🧠 Description The plugin allows administrators to modify the contents of sn.php via the Sender’s Name field in the settings page. User-supplied inp...

CVE-2022-22947-pb-ai

CVE-2022-22947 Spring Cloud Gateway Vulnerability Verification Application This is a Spring Cloud Gateway application specifically designed to demonstrate and verify the CVE-2022-22947 vulnerability. The application uses a vulnerable version of Spring Cloud Gateway and allows arbitrary code...

CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

Poc-CVE-2024-21542

Poc-CVE-2024-21542 Overview luigi is a package that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization, handling failures, command line integration, and much more. Affected versions of this package are vulnerable to Arbitrary File...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer root@kitploit: sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash root@kitploit: bash shellshock.sh -u -h -p Python root@kitploit: python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 – XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...

OneDriveUpdaterSideloading

OneDriveUpdater DLL Sideloading This repo contains source code for DLL sideloading the version.dll for OneDriveUpdater.exe/OneDriveStandaloneUpdater.exe. The payload is based on the subroutines outlined in the PaloAltoNetworks Unit42's blog post. My blog post regarding this payload:...

Lastenzug

LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...

CVE-2026-83534

PostgreSQL Anonymizer contains a privilege escalation vulnerability in the anon.anonymize_database_parallel() function, allowing the owner of a table to execute arbitrary code with superuser privileges. The CVSS 3.1 score is 6.4 (MEDIUM) , with a network attack vector, high complexity, high privi...

EUVD-2026-72143

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

CVE-2026-83534 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...