CVE-2026-43684

creationtimestamp| type| source ---|---|--- 2026-09-15 04:45:39+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 20:47:33+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:00:49+00:00|...

CVE-2026-43683

creationtimestamp| type| source ---|---|--- 2026-09-15 04:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 20:47:31+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:24+00:00|...

CVE-2026-28968

creationtimestamp| type| source ---|---|--- 2026-09-15 04:45:24+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 20:47:21+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:34+00:00|...

CVE-2026-28966

creationtimestamp| type| source ---|---|--- 2026-09-15 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 20:47:19+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:44+00:00|...

CVE-2026-20683

creationtimestamp| type| source ---|---|--- 2026-09-15 04:45:09+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 20:47:10+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:19+00:00|...

CVE-2025-29927

CVE-2025-29927 About the Next.js CVE-2025-29927 security vulnerability... You can check the link for detailed information: https://bilalgns.github.io/posts/nextjs-cve-2025-29927...

bx2-writeups

Security Writeups A collection of my cybersecurity writeups covering: TryHackMe Hack The Box Linux Privilege Escalation AI & Infrastructure Security CTFs Security Challenges Author: Nanashi Bx2...

ROOT-APP-NPM-CVE-2024-45590 CVE-2024-45590 in body-parser - Patched by Root

Root has patched CVE-2024-45590 in the body-parser package for Root:npm. Multiple fixed versions available...

PentesterLab-Intercept-CVE-2014-1266

This repository does not have a README...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

CVE-2019-9849

CVE-2019-9849: Remote bullet graphics retrieved in “stealth mode” in LibreOffice LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable...

CVE-2024-38821-POC

CVE-2024-38821: Proof of Concept PoC: Authentication Bypass in Spring Framework This is a proof of concept for the CVE-2024-38821 vulnerability Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 root@kitploit: cd vuln docker build -t cve-2024-38821-poc...

CVE-2026-48907

CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...

CVE-2021-25162

CVE-2021-25162 CVE-2021-25162...

cPanel-Fix

cPanel & kernel security helper One security-remediation.sh for CVE-2026-41940 cPanel, CVE-2026-31431 kernel "Copy Fail", CSF, optional domain/proxy cleanup, and optional operator hardening. Maintainer: Aria Jahangiri Far Clone root@kitploit: git clone https://github.com/MrAriaNet/cPanel-Fix.git ...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

presentations

My presentations More things can be found in my personal site: https://sites.google.com/site/zhiniangpeng root@kitploit: Exploiting preauth RCE and Sandbox escape vulnerabilities in EXSi, Typhooncon 2023 OLE object are still dangerous today — Exploiting Microsoft Office, POC 2023...

CVE-2023-30212

CVE-2023-30212 Docker environment and exploit the CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0 .This vulnerability allows for Cross-Site Scripting XSS attacks...

[SECURITY] Fedora 43 Update: perl-Dancer2-1.1.2-4.fc43

Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...

[SECURITY] Fedora 43 Update: perl-Protocol-HTTP2-1.14-1.fc43

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...