OpenSSL-Vulnerability-Detection-Script

OpenSSL-Vulnerability-Detection-Script This is an OpenSSL Vulnerability Detection Script for CVE-2022-2274...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Shell Script to mitigate CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache Installation root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Usage Complete fix and suggested way to mitigate the vulnerabilty This...

CVE-2024-24919

CVE-2024-24919 Hello everyone, I am sharing a modified script from CVE-2024-24919 which can extract paths categorized as critical...

quick-fix-cve-2024-38063

quick-fix-cve-2024-38063 quick powershell script to fix cve-2024-38063 Donation if you want to support my works, you can donate me at the following monero address: root@kitploit: 4B9WQivaHfd3miDfPKEfCianocGpBx9d8FXycz2vmNW3aBDVKHgkBd9Gmapt4RBVEpTwnehujsiUBBehUiLvnEHs7VFstCC Or using PayPal:...

CVE-2023-52654

Run file python3 CVE-2023-52654.py or sudo CVE-2023-52654.py latest kernel bypass root updated POC just run python file with root or without root ✅ Features Automatically escalate privileges on Unix systems by exploiting misconfigured setuid/setgid binaries, capabilities, and sudo permissions...

CVE-2024-3094

CVE-2024-3094 XZ-Utils Vulnerability Checker and Fixer This Bash script checks for vulnerable versions of xz-utils installed on your system and offers to replace them with a stable, uncompromised version. Requirements wget tar make sudo Usage 1. Ensure you have the required dependencies installed...

os-experiment-4

os-experiment-4 os experiment 4 CVE-2016-5195 ./run.sh...

SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...

cve-2023-22515-exp

cve-2023-22515-exp Python exploit script for cve-2023-22515 Arguments: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST Specify the URL -U USERNAME, --username USERNAME Specify the username -PW PASSWORD, --password PASSWORD Specify the password -E EMAIL, --email EMAI...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

Windows10_Cumulative_Updates_PowerShell

直接使用这个——https://github.com/aaronparker/LatestUpdate 如果系统是 Windows 10 企业版或教育版，则会更新所有内容。如果是专业版，则仅修补 1809、1903 和 1909。 Windows10CumulativeUpdatesPowerShell 此 PowerShell 脚本可在系统上运行，用于判断系统是否已修补 CVE-2020-0601（“曲线球”）漏洞，若未修补则下载相应补丁并执行。仅适用于 Windows 10 1507-1909 版本（企业版或教育版；专业版仅 1809-1909），未包含基于 ARM 的 CPU...

CVE-2013-3900-Remediation-Script

root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...

BIT-KIBANA-2026-78593 Improper Control of Generation of Code in Kibana Leading to Privilege Escalation

An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond th...

BIT-ELK-2026-78593 Improper Control of Generation of Code in Kibana Leading to Privilege Escalation

An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond th...

CVE-2026-80055

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit thi...

CVE-2026-80177

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2026-80177

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2026-80177

Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected by an SQL Injection vulnerability. A low-privileged attacker with remote access could exploit this to achieve script injection , resulting in high confidentiality impact with n...

CVE-2026-80177

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...