ROOT-APP-GOBINARY-CVE-2026-27136 CVE-2026-27136 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-27136 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33814 CVE-2026-33814 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-33814 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42506 CVE-2026-42506 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-42506 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

CVE-2024-57376

CVE-2024-57376 Pre-auth remote code execution exploit for D-Link DSR-250 and DSR-250N Security advisory: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Usage root@kitploit: $ python3 exploit.py usage: Example root@kitploit: $ python3 exploit.py 192.168.1.1 443 id...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/ Summary...

CVE-2020-0041

CVE-2020-0041 This repository contains code for exploiting CVE-2020-0041, a bug we reported to Google in Decmeber 2019 and was fixed in the Android Security Bulletin from March 2020. You can find the sandbox escape exploit in sandbox/. The analysis of the bug and exploitation approach can be foun...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

DirtyPipe-Android

DirtyPipe para Android Dirty Pipe CVE-2022-0847 PoC de root temporal para Android. Objetivos Actualmente solo funciona en Pixel 6 con nivel de parche de seguridad del 2022-02-05 al 2022-04-05. No lo uses en otros dispositivos ni otras versiones. Debe fallar reiniciar. Dirty Pipe finalmente fue...

ghostlock-x200-root

GhostLock-X200 v1.3.5 ⚠️ 法律与安全声明（请务必先阅读） 本仓库仅用于安全研究与教育目的 ，并且只允许在你自己拥有、或已获得明确 书面授权的设备上使用 。未经授权对他人设备使用本工具，可能违反当地法律法规。 使用本工具可能导致设备异常重启、数据损坏、系统异常、保修失效等后果，请自行 评估风险。作者不对任何直接或间接损害承担责任，亦不对任何滥用行为负责。 继续阅读或使用本仓库，即表示你已理解并同意自行承担全部风险与责任。 针对 vivo X200（PD2415 / Dimensity 9400 / b57 内核） 、基于...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Several models of ASUS's routers include a service called infosvr that listens on UDP broadcast port 9999 on the LAN or WLAN interface. It's used by one of ASUS's tools to ease router configuration by automatically locating routers on the...

ACF

Análisis Forense de Conexiones Android Este software permite a un investigador forense mapear cada conexión con su proceso de origen. No requiere privilegios root en el sistema, pero sí requiere adb y depuración USB. Sistemas operativos compatibles ACF actualmente solo funciona en Linux Ubuntu...

1day-archive

1dayexploit - archivo Análisis técnicos en profundidad y análisis de causa raíz de CVE divulgados recientemente. Acerca de Este repositorio recopila análisis técnicos de CVE divulgados recientemente — la ventana de 1 día entre la publicación del parche y la explotación generalizada. Cada análisis...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/andripwn, @andripwn on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/andripwn/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100...

CVE-2026-41567

CVE-2026-41567 1day Un 1-day para la fuga de Docker CVE-2026-41567. Es una demostración de fuga de Docker usando xz / unpigz troyanizados. Se puede modificar fácilmente para usarse de forma remota es decir, solo tienes que cambiar la IP predeterminada de docker por una C2 remota. Más información...

CVE-2024-29972

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POCs CVE-2024-29972-EXP CVE-2024-29972 Zyxel NAS Backdoor Account: Unauthorized activation of backdoor account FOFA app="ZyXEL-NAS326" Notes This EXP exploitation script is a combination of...

cve-2016-6662

About Some help to explot CVE-2016-6662 Warnings Make sure to change the attacker IP in the c file before compiling Credit All credit to original discoverer. Writeups here: http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html Discussion here:...

CVE-2021-3156

Baron Samedit - Sudo CVE 2021-3156 PoC Written in BASH and C. Written by: TheFlash2k/Ali Taqi Wajid Usage: root@kitploit: This would spawn a root shell directly if the sudo is vulnerable. $ make $ ./exploit...

CVE-2022-20186

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

dell-emc_recoverpoint

Dell EMC RecoverPoint Exploits para una plataforma empresarial de protección de datos He descubierto las siguientes vulnerabilidades en la plataforma empresarial de protección de datos RecoverPoint, mencionadas en la divulgación de Dell EMC. http://seclists.org/fulldisclosure/2018/May/61 Ejecució...