unzip_poc

CVE-2022-0529 y CVE-2022-0530 POC para unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

looney-tunables-CVE-2023-4911

PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable root@kitploit: env -i...

Occ

遮蔽認識バイレイヤーモデリングによる禁止物品セグメンテーション ICME 2025 遮蔽認識バイレイヤーモデリングによる禁止物品セグメンテーションの公式 PyTorch 実装です。 論文リンク: IEEE, Arxiv。 はじめに 依存関係 コードは、Pytorch 2.1.2 と CUDA 11.8 を備えた Linux でテスト済みです。 必要に応じて、numpy2.0.0 をインストールしてください（当方では 1.24.0 を使用しています）： root@kitploit: conda create -n occ python=3.10 conda activate occ pip...

reachability

-- INICIO DEL DESCARGO -- ÚSELO BAJO SU PROPIO RIESGO – DE NINGUNA MANERA SOY RESPONSABLE POR CUALQUIER DAÑO OCURRIDO – SI NO TIENE PERMISO EXPLÍCITO DEL PROPIETARIO DE LA RED, NO Y REPITO NO EJECUTE ESTO ESTO ES PYTHON ENCAPSULANDO MASSCAN https://github.com/robertdavidgraham/masscan -- FIN DEL...

CVE-2025-67445

Panoramica Una vulnerabilità nell'interfaccia di gestione web del TOTOLINK X5000R V9.1.0cu.2415 consente a un attaccante remoto non autenticato sulla LAN di crashare il servizio web tramite un segmentation fault. Inviando una richiesta HTTP POST di dimensioni eccessive all'endpoint CGI, un...

CVE-2026-16440

A flaw was found in Eclipse OpenJ9. A remote attacker with low privileges could exploit this vulnerability by convincing a user to process a specially crafted .class file containing deeply nested annotations. This could lead to a segmentation fault, resulting in a Denial of Service DoS for the...

CVE-2022-0918

CVE-2022-0918 Pagina CVE di Red Hat: https://access.redhat.com/security/cve/cve-2022-0918 Issue GitHub con patch collegate: https://github.com/389ds/389-ds-base/issues/5242 PoC L'applicazione PoC accetta un singolo IP, sia IPv4 che IPv6 funzioneranno. Di default invia il messaggio alla porta 389;...

CVE-2022-43343

Beschreibung für CVE-2022-43343 N-Prolog v1.91 wurde entdeckt, eine globale Pufferüberlauf-Schwachstelle in der Funktion gettoken in Main.c zu enthalten. Reproduktion Um die Schwachstelle zu reproduzieren, laden Sie eine anfällige Version von N-Prolog v1.91 herunter und kompilieren Sie das Projek...

CVE-2023-38545-sample

Breve descrizione Questo progetto mostra la CVE-2023-38545 di cURL. L'ho reso il più leggero possibile. Configurazione Prima, crea l'immagine Docker: docker build . -t cveimage Successivamente, possiamo semplicemente eseguire il file immagine, creando un container Docker temporaneo che verrà...

CVE-2025-55891

CVE-2025-55891: Corruzione dell'heap in TIFFCP.EXE docuPrinter Pro tramite file TIFF malformato Riepilogo Esiste una vulnerabilità di corruzione dell'heap in TIFFCP.EXE, un'utilità da riga di comando inclusa in Neevia docuPrinter Pro, a causa dell'uso di una versione obsoleta e vulnerabile di...

xpdf-docker

Immagini Docker di Xpdf Questa repository contiene immagini docker per Xpdf versione 4.04, che è vulnerabile a CVE-2022-30524. Creazione delle immagini 📦 Questa repository contiene le immagini in 3 varianti: bullseye/gcc : Debian "bullseye", compilata con gcc bullseye/afl : Debian "bullseye",...

sudo-1.8.3p1-patched

sudo-1.8.3p1-patched Questa è una versione personalizzata di sudo, basata sul pacchetto sudo 1.8.3p1 fornito da Canonical per Ubuntu 12.04 utilizzando gli URL sottostanti, con le patch CVE-2021-3156 applicate. http://us.archive.ubuntu.com/ubuntu/pool/main/s/sudo/sudo1.8.3p1-1ubuntu3.7.dsc...

CVE-2026-26459

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

CVE-2026-26453

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapserverhandlesession function when processing COAP messages containing URIPATH options with NULL data pointers. When the server searches for a URIPATH option matching the string "separate", ...

CVE-2026-26452

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

CVE-2010-1205

Beispiel-Exploit unter Verwendung der Schwachstelle CVE-2010-1205 in libpng =1.4.2 gregbook - Sammlung von Beispielprogrammen, die mit den libpng-Quellen verteilt werden generate - erzeugt eine bösartige PNG-Datei, die beim Lesen der Datei mit libpng einen Heap-Überlauf auslöst Schritte zum...

CVE-2026-80554

A flaw was found in the Linux kernel's s390/vfioccw component. The vfio-ccw logic processes channel programs recursively, breaking them into segments when a Transfer-In-Channel TIC Channel Command Word CCW is encountered. An attacker could exploit the lack of a proper limit on these segments,...

vcsa-hardening-tool

Ferramenta de Fortalecimento e Registro de Logs do VCSA Um script automatizado de fortalecimento para o VMware vCenter Server Appliance VCSA, projetado para impor segmentação de rede Zero Trust e auditoria forense profunda. Esta ferramenta foi projetada para mitigar riscos críticos associados a...