Nemesis

Overview Nemesis is an open-source, centralized data processing platform that ingests, enriches, and allows collaborative analysis with humans and AI of files collected during offensive security assessments. Nemesis 2.0 is built on Docker with heavy Dapr integration, our goal with Nemesis was to...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

CVE-2023-2255

CVE-2023-2255 CVE-2023-2255 RCE & load of external ressources found by @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 Exploit Just an example to drop a webshell in current directory. root@kitploit: python3 CVE-2023-2255.py --cmd 'wget...

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

CVE-2021-22204

Vulnerable Version 7.44 12.23 Reproduce root@kitploit: $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg Screenshot Reference NVD-CVE-2021-22204...

CVE-2008-4654

CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...

CVE-2024-38077-check

Vulnerability analysis asynchronous pdf file. My ability is limited, unable to achieve RCE yet. Please advise, masters. For vulnerability verification, just change the IP. root@kitploit: if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

CVE-2025-69212

CVE-2025-69212: OpenSTAManager has an OS Command Injection in P7M File Processing Overview...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — OS Command Injection in P7M File Processing Overview...

CVE-2025-43300

📚 CVE-2025-43300 - Detailed Vulnerability Analysis 🎯 Summary CVE-2025-43300 is a buffer overflow vulnerability in DNG Digital Negative file processing caused by an inconsistency between TIFF metadata and JPEG data , allowing remote code execution RCE. 🔍 1. DNG FILE ANATOMY Layered Structure:...

CVE-2026-38344

A flaw was found in FFmpeg. This vulnerability involves a NULL pointer dereference within the getminbuffersize function when processing specially crafted video files. An attacker could exploit this by providing a malicious video file, leading to a Denial of Service DoS. A Denial of Service attack...

CVE-2026-68515

OpenEXR is the reference implementation for the EXR image format used in the motion picture industry. A heap out-of-bounds write exists in the exrmultiview utility when combining two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's chann...

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

MiracleLinux 9 : java-17-openjdk-17.0.20.0.8-1.2.el9.ML.1 (AXSA:2026-1630:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1630:13 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

CVE-2026-20679

CVE-2026-20679 is a vulnerability in the CoreUI framework on macOS. Processing a maliciously crafted file may lead to unexpected app termination (denial of service). The root cause is not further specified beyond "improved checks" being applied as the fix. The issue was reported by Mustafa Calap ...

PT-2026-79271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

Exploit for OS Command Injection in Devcode Openstamanager

OpenSTA-Exploit --- About CVE-2025-...

CVE-2026-19026

A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...

ImageMagick < 6.9.13-52 / 7.x < 7.1.2-27 Heap Buffer Over-write (CVE-2026-62946)

The remote host has a version of ImageMagick installed that is prior to 6.9.13-52 or 7.x prior to 7.1.2-27. It is, therefore, affected by a heap buffer over-write vulnerability: - Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer...