CVE-2026-31431-REVSHELL

root@kitploit: █▀▀ ▄▀█ █ █ █▀█ █▀█ █▀█ ▀█▀ █▀░ █▀█ █ █▄▄ █▀▄ █▄█ █▄█ ░█░ CVE-2026-31431 • Linux Kernel LPE → Root Reverse Shell Resumen FailRoot es un exploit armado para CVE-2026-31431 — una escritura fuera de límites en el subsistema crypto: algifaead del kernel de Linux. Encadena una escalada ...

CVE-2017-7308

CVE-2017-7308 ID CVE: CVE-2017-7308 Fecha de publicación: 2017-03-29T20:59:00.373 Puntuación base CVSS 3.0/3.1: 7.8 Descripción: La función packetsetring en net/packet/afpacket.c en el kernel de Linux hasta 4.10.6 no valida correctamente ciertos datos de tamaño de bloque, lo que permite a usuario...

CVE-2017-0037

CVE-2017-0037 Vulnerabilidad de Corrupción de Memoria del Navegador Microsoft Este documento trata sobre CVE-2017-0037 - Vulnerabilidad de Corrupción de Memoria del Navegador Microsoft. Primero presentará qué es una Ejecución Remota de Código RCE y luego repasará algunos detalles técnicos. ¿Qué e...

exploitarium

https://discord.gg/WytKH65ZR únete para investigación, ayuda, documentación y más información útil para los interesados. Declaración Este repositorio estaba incompleto cuando se publicó. En cuanto al uso de IA, mi flujo de trabajo de fuzzing fue automatizado por IA con un flujo de trabajo estrict...

CVE-2026-82522

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

CVE-2026-53670

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-31431-Advanced-Exploit

CVE-2026-31431 — Copy Fail Vulnerabilidad de escritura fuera de límites en la caché de páginas del kernel de Linux Error en la cadena de lista dispersa AEAD de AFALG Resumen La interfaz algifaead del kernel de Linux contiene una vulnerabilidad que permite a usuarios sin privilegios escribir datos...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

EUVD-2026-70244

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53670

PREVAIL , a polynomial-runtime eBPF verifier using an abstract interpretation layer, is vulnerable to a verifier bypass prior to version 0.2.4 . In the EbpfTransformer::add() function, offset-variable updates are silently skipped when the destination register carries a non-singleton typeset (two ...

CVE_2025_24257----NOT-MINE

🔧 CVE202524257----NOT-MINE - Ejecuta el PoC de Windows de forma segura 🧾 Descripción general CVE202524257----NOT-MINE es una prueba de concepto PoC para Windows que muestra un bug de memoria del kernel en IOGPUFamily. Se basa en un subdesbordamiento de bitmapmask que puede provocar una escritura...

EUVD-2026-70241

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

CVE-2026-82522

libjxl before version 0.12.0 contains an integer underflow vulnerability in the container box parser . On 32-bit platforms , 64-bit box sizes are truncated to size_t, allowing a remote attacker to supply a crafted JPEG XL file that causes the decoder to parse attacker-controlled codestream bytes ...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit Vulnerability Detector PoC This proof-of-concept detects whether a WebKit-based browser is vulnerable to CVE‑2025‑24201 , a high-severity out-of-bounds write vulnerability caused by incorrect capability validation in the WebGL implementation. 🔍 Vulnerability Summary...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized testing. 📋 Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...

CVE-2025-5777

CVE-2025-5777 （又名 CitrixBleed 2）是 Citrix Gateway 登录过程中的一个越界读取（OOB）。 这是一个利用该越界读取（CVE-2025-5777）的概念验证代码，用于从存在漏洞的 Citrix Gateway 实例中获取内存数据，可能导致 cookies/凭据被盗。 使用方法 我强烈建议在使用脚本时使用 venv 虚拟环境。 root@kitploit: usage: main.py -h -t THREADS -o OUTPUT url positional arguments: url target URL options: -h, --he...

CVE-2026-78689

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2025-14174-Poc

CVE-2025-14174 - Exploit PoC Resumen Este repositorio contiene un exploit de Prueba de Concepto PoC completamente funcional para CVE-2025-14174 también registrado como EUVD-2025-203113, una vulnerabilidad crítica de corrupción de memoria en el motor gráfico ANGLE. El fallo surge de una restricció...

EUVD-2026-70142

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2026-78689 NGINX ngx_http_js_module vulnerablility

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...