5611 matches found
CVE-2023-38831-winrar
CVE-2023-38831 Builder Quick exploit builder for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. I created this exploit builder mainly to learn rust language, so don't expect to find clean and optimized code. Info about this vulnerability...
PrettyPrague
PrettyPrague GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability Another zeroday in an antimalware provider, I'm not sure but I believe this vulnerability affect other GenDigital products as well such as AVG, Norton... For now the PoC is compatible with any version of Avast...
Gogs <= 0.13.3 - Remote Code Execution
Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...
T3MP3ST
🌩️ T3MP3ST 🌩️ root@kitploit: ▄▄▄█████▓▓█████ ███▄ ▄███▓ ██▓███ ▓█████ ██████ ▄▄▄█████▓ ▓ ██▒ ▓▒▓█ ▀ ▓██▒▀█▀ ██▒▓██░ ██▒▓█ ▀ ▒██ ▒ ▓ ██▒ ▓▒ ▒ ▓██░ ▒░▒███ ▓██ ▓██░▓██░ ██▓▒▒███ ░ ▓██▄ ▒ ▓██░ ▒░ ░ ▓██▓ ░ ▒▓█ ▄ ▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒ ██▒░ ▓██▓ ░ ▒██▒ ░ ░▒████▒▒██▒ ░██▒▒██▒ ░ ░░▒████▒▒██████▒▒ ▒██▒ ░...
shakeitoff
shakeitoff A smaller, minimized, and cleaner version of InstallerFileTakeOver aka the zero-day exploit that is a "variation" of CVE-2021-41379 later assigned CVE-2021-43883. This version does not pop a shell like InstallerFileTakeOver. The point of this code was to create a simpler proof of conce...
nano-analyzer
Nano-analyzer A minimal LLM-powered zero-day vulnerability scanner byAISLE. Research prototype for demonstration purposes. This is a simple, single-file harness that is able to detect real zero-day vulnerabilities. Note that it is a prototype, biased towards C/C++ memory safety bugs, and will...
o3_finds_cve-2025-37899
This is the artefact repository associated with my blog post How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation. See that post for details...
mass_cve-2021-41773
masscve-2021-41773 MASS CVE-2021-41773 स्क्रीनशॉट उपयोग ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool नोट ! परिणाम स्वचालित रूप से vuln.txt में सहेजे जाएंगे आप...
CVE-2023-21674
First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast root@kitploit: kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 5...
CVE-2025-30400
CVE-2025-30400 Concept: Windows DWM Use-After-Free UAF Project Overview This repository features the CVE-2025-30400 Concept , a Python program designed to illustrate the impact of a Use-After-Free UAF privilege escalation zero-day vulnerability , such as the one reported in Microsoft Windows...
anamnesis-release
Anamnesis: LLM Exploit Generation Evaluation This repository contains the evaluation framework for studying how LLM agents generate exploits from vulnerability reports in the presence of exploit mitigations. Given a bug report and proof-of-concept trigger, agents analyze vulnerable software and...
CVE-2024-4761
CVE-2024-4761 उच्च CVE-2024-4761 शोषण गूगल ने क्रोम ब्राउज़र में CVE-2024-4761 के रूप में ट्रैक की गई एक उच्च-गंभीरता वाली जीरो-डे भेद्यता को संबोधित करने के लिए आपातकालीन सुरक्षा अपडेट जारी किए हैं। यह भेद्यता Google वेब ब्राउज़र के V8 JavaScript इंजन में मौजूद एक आउट-ऑफ-बाउंड राइट समस्या है।...
evil-ssdp
Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...
CVE-2024-4040-CrushFTP-File-Read-vulnerability
CVE-2024-4040: CrushFTP File Read Vulnerability Overview On April 19, 2024, a new zero-day vulnerability affecting CrushFTP versions below 10.7.1 and 11.1.0, as well as legacy 9.x versions, was disclosed to a private mailing list by the managed file transfer vendor CrushFTP. Initially, no CVE was...
cve-2015-0313
CVE-2015-0313 Adobe Flash vulnerability source code cve-2015-0313 from Angler Exploit Kit Reference: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...
FirmAE
FirmAE FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate From Firmadyne's 16.28% to 79.36% with five arbitration techniques. We tested FirmAE on 1,124 wireless-router and IP-camera firmware images fr...
CVE-2022-30190
CVE 30190 Amine TITROFINE | December 17, 2022 Follina CVE-2022-30190 is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution RCE attacks. It exists when MSDT is called using the URL...
ToolShell-Honeypot
ToolShell-Honeypot SharePoint Zero-Day A Docker-based honeypot focused on detecting and logging exploitation attempts against Microsoft SharePoint zero-day vulnerabilities. This honeypot is designed for early detection and threat intelligence, not for simulating a full SharePoint environment or...
Detection-struts-cve-2017-5638-detector
🚨 Apache Struts CVE-2017-5638 के लिए रीयल-टाइम विसंगति का पता लगाना स्ट्रीमिंग एनालिटिक्स और प्रोबाबिलिस्टिक डेटा स्ट्रक्चर्स पर आधारित ज़ीरो-डे एक्सप्लॉइट डिटेक्शन 📌 प्रोजेक्ट विवरण यह प्रोजेक्ट एक रीयल-टाइम विसंगति पहचान प्रणाली है जिसे Apache Struts पर CVE-2017-5638 भेद्यता के माध्यम से RCE...