Shinigami

Shinigami Shinigami is an experimental tool designed to detect and unpack malware implants that are injected via process hollowing or generic packer routines. How this works The tool operates by hooking NT functions related to Process Hollowing and marking newly executable memory pages with the...

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE Exploit Una herramienta de investigación de seguridad para detectar y probar la vulnerabilidad CVE-2025-12735 en los paquetes npm expr-eval y expr-eval-fork. ⚠️ Aviso legal Esta herramienta es solo para pruebas de seguridad autorizadas y fines educativos. El acceso no...

Amsi_Bypass_In_2023

Amsi Bypass on Windows 11 In 2023 Technical details can be found in the article: https://medium.com/@gustavshen/bypass-amsi-on-windows-11-75d231b2cac6 AttackAmsiOpenSession.ps1 root@kitploit: HRESULT AmsiOpenSession in HAMSICONTEXT amsiContext, out HAMSISESSION amsiSession ; This powershell scrip...

CVE-2026-65891

CVE-2026-65891 — PoC de Rename para Joomla JCE Escáner de prueba de concepto para CVE-2026-65891 en la extensión Joomla Content Editor JCE. La validación de entrada incorrecta en la función rename del administrador de archivos de JCE permite a un usuario autenticado con permisos de gestión de...

libreoffice-remote-arbitrary-file-disclosure

Vulnerability description CVE-2018-6871 First part LibreOffice supports COM.MICROSOFT.WEBSERVICE function: root@kitploit: https://support.office.com/en-us/article/webservice-function-0546a35a-ecc6-4739-aed7-c0b7ce1562c4 The function is required to obtain data by URL, usually used as: root@kitploi...

CVE-2026-97878

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Remote Code Execution PoC A Go proof of concept for CVE-2025-59528 targeting Flowise versions...

CVE-2026-52622

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function...

CVE-2026-66491

Lectura arbitraria de archivos mediante getSource en PhocaCommander PhocaCommander ≤ 6.1.3 — Path Traversal autenticado de administrador, sin CSRF requerido RESUMEN Existe una vulnerabilidad de lectura arbitraria de archivos en el endpoint del editor de archivos de PhocaCommander. La función...

AZL-104372 CVE-2026-98075 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

xyntia

This repository does not have a README...

EUVD-2026-86791

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears the copied function graph state, but it currently runs after...

CVE-2026-97937

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears the copied function graph state, but it currently runs after...

CVE-2026-97937

The Linux kernel contains a vulnerability in ftrace where the child function graph state is not initialized early enough during a fork operation. Specifically, dup_task_struct() copies the parent's task_struct including the ret_stack. Because ftrace_graph_init_task() currently runs after copy_exe...

CVE-2026-93603

A flaw was found in vm2. This vulnerability allows an attacker who can execute untrusted script within the sandbox to achieve arbitrary code execution on the underlying host system by escaping sandbox containment. The issue occurs because vm2 fails to properly handle function calls lacking an...

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – Cross‑Chain Bridge Message Forging via Missing Origin Chain ID Program Code Solidity + Python exploit root@kitploit: // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from, address to, uint256 amount, uint256...

ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...

binaryninja-ollama

Binary Ninja Ollama v1.0.9 Author: Austin Haggard Binary Ninja Ollama integrates with your own locally hosted ollama server to rename functions and variables with AI Description: Ollama is a tool that allows you to pull open source AI models and run them locally. Some models require extensive...

xfg_analyzer

Recovering function prototypes by bruteforcing XFG Hashes This repository contains scripts for generating and looking up eXtended Flow Guard hashes. An extended writeup of how this works is available in issue 22 of International Jouranl Of Proof Of Concept || GTFO. My work on this PoC was greatly...

CVE-2024-9593-Exploit

CVE-2024-9593-Exploit The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attacker...