LFI-aiohttp-CVE-2024-23334-PoC

LFI-aiohttp-CVE-2024-23334-PoC A Bash script to automate Local File Inclusion LFI attacks on vulnerable aiohttp servers, specifically targeting CVE-2024-23334. This exploit allows for unauthorized access to arbitrary files on systems running affected versions of aiohttp with improperly configured...

ShieldBreak

ShieldBreak - Windows Defender 0day vulnerability Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass. The PoC was tested in the latest version of windows 11 25h2 +Canary channel and windows server 2025, the PoC also have ...

bash-tls-reneg-attack

bash-tls-reneg-attack A bash script that attempts to flood a server with TLS renegotiations by using the openssl client. See CVE-2011-1473 and CVE-2011-1473 for details. Usage: ./tls-reneg.sh some.hostname.here:port...

spring-cve-2022-22947

spring-cve-2022-22947 Inyección de código en Spring Cloud Gateway : CVE-2022-22947...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner A Python-based detection tool for CVE-2024-40725 , an Apache HTTP Server source code disclosure vulnerability affecting versions 2.4.0 and 2.4.61. Legal notice: Only run this scanner against servers you own or have explicit written authorization to test. Unauthorized use ma...

WSUSResponder

🧰 WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT 🎯 Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket Upgrade Handler SSRF Lab Security Academy CERT Project vulnerability reproduction lab environment for mentor demos Overview...

spd_dump-macos

spddump for macOS English | 简体中文 macOS port of the UNISOC Spreadtrum BootROM/FDL flashing toolchain. Based on ilyakurdyukov/spreadtrumflash MIT, with execaddr2 — the CVE-2022-38694 signature-verification bypass of the closed-source spddump — reimplemented, completing the full chain on macOS arm64...

hp-slate7-root-kit

Root for the HP Slate 7 2800 on Android 4.1.1 English | Русский This repository contains a complete, self-contained kit for obtaining persistent root access on the HP Slate 7 2800 running firmware 1.05.18 and kernel Linux 3.0.8+ by exploiting the local vulnerability CVE-2015-1805. The kit was run...

CVE-2023-46747

This repository does not have a README...

CVE-2017-11882-Possible-Remcos-Malspam

Este repositorio no tiene un README...

platform_art_CVE-2021-0394

This repository does not have a README...

apache__incubator-dubbo_CVE-2021-30181_2-6-8

Apache Dubbo Project Apache Dubbo is a powerful and user-friendly Web and RPC framework. It supports multiple language implementations such as Java, Go, Python, PHP, Erlang, Rust, and Node.js/Web. Dubbo provides solutions for communication, service discovery, traffic management, observability,...

CVE-2018-2636

Install root@kitploit: $ pip install --user requests argparse unicodedata Info POC for CVE-2018-2636. Usage example root@kitploit: python eGw.py -H 127.0.0.1 -P 8080 -i ... Let's get info about server ! Your instance is vulnerable to CVE-2018-2636 ... Links Oracle Critical Patch Update Advisory...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U is a multi-protocol file server capable of sending and receiving files from other networked computers through various means. CVE-2024-28995 is an unauthenticated directory transversal vulnerability in SolarWinds Serv-U that wou...

frameworks_minikin_AOSP10_r33_CVE-2021-0313

This repository does not have a README...

linux-4.19.72_CVE-2023-35828

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

node-ip-vex

node-ip-vex This sample project depends on the node-ip npm package which is vulnerable to CVE-2024-29415. However, because our project does not directly use the vulnerable function .isPublic, it is not exploitable to CVE-2024-29415. Run an analysis with Docker Scout I can package my project as a...

CVE-2026-18504-CVE-2026-16732

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

gotigate

gotigate Exploit CVE-2022-40684 Install root@kitploit: ▶ go install github.com/gustavorobertux/gotigate@latest Basic Usage root@kitploit: ▶ gotigate TARGET IP or youraddress.com "height":1, "interface":"", "csf-device":"", "table-visualization":"", "device-list-online":"",...