32 matches found
test-vuln
test-vuln a controlled environment to test CVE-2025-55182...
CVE-2026-23631
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...
CVE-2026-35616
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...
CVE-2026-39987
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...
droidground v1.0.15
DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...
Alibaba Cloud Linux 3 : 0212: cifs-utils (ALINUX3-SA-2026:0212)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0212 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12505: A flaw was found in the cifs-utils...
CVE-2026-0412 Insufficient input validation vulnerability in NETGEAR JR6150 Web UI
Insufficient input validation vulnerability in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in...
Exploit for CVE-2026-9082
⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...
Exploit for CVE-2026-6857
⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...
Evil-M5Project WiFi Exploration Tool
This is the latest archive as of 2025/01/02 of the Evil-M5Project, an innovative tool developed for ethical testing and exploration of WiFi networks. It harnesses the power of the M5Core2 device to scan, monitor, and interact with WiFi networks in a controlled environment. This project is designe...
cve-poc-garage
Curated collection of CVE Proof of Concepts — reproducib...
APTSimulator
This is a toolset for simulating an APT Advanced Persistent Threat attack on a Windows system. The tool, called APT Simulator, is a Windows Batch script that uses a set of tools and output files to make a system look as if it was compromised. It is designed to be simple and easy to use, requiring...
Exploit for Command Injection in Fit2Cloud 1Panel
https://github.com/hophtien/CVE-2025-54424/releaseshttps://gi...
JavaDeserH2HC
This repository contains sample codes for the Hackers to Hackers Conference magazine 2017 H2HC. The codes are designed to demonstrate various exploitation techniques, specifically focusing on Java deserialization vulnerabilities. The primary vulnerability class/vector targeted is Java...
Exploit for Path Traversal in Microsoft
PoC exploit for CVE-2025-47176, a Microsoft Outlook Remote Code...
Exploit for Use After Free in Microsoft
🔥 CVE-2025-29824 Zero-Day Exploit 🔥 Welcome to the dark heart...
Exploit for Code Injection in Grafana
File-Read-CVE-2024-9264 Proof Of Concept for File Read in Graf...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authenti...
Ray has arbitrary code execution via jobs submission API
Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...