MakeMeEnterpriseAdmin

Example of successful execution: root@kitploit: ====================================================================== /\ Elevated domain admins to Enterprise admins - version 1.0 || /||\ Require: domain admin right |:||:| or more specifically DS-Replication-Get-Changes-All |/||| Vincent LE TOUX...

FastJsonAutoTypeBypass

What's this This project is used for studying how to bypass fastJSON AutoType check. Gadget Info Mapping just for fastjson 1.2.47: root@kitploit: package com.FastJson1242; import com.alibaba.fastjson.JSONObject; public class Poc public static void mainString argv String payload ="\n" + " "a": \n"...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - llama.cpp LLaMA-Android JNI Integer Overflow Companion PoC for the Hunt-Benito article "One Multiply Too Many: CVE-2026-70638 — Integer Overflow in llama.cpp's Android JNI Heap Allocation" →...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...

pared

Pared Pared is a lightweight, secure control plane and real-time administrative web dashboard written in Crystal for Linux host security. It provides centralized management for firewalld DBus/CLI interfaces and NetworkManager connections, featuring mutual TLS mTLS, PAM/SSSD authentication, and...

CVE-2025-27636-Apache-Camel-PoC

Apache Camel CVE-2025–27636 et CVE-2025-29891 PoC CVE-2025–27636 et CVE-2025-29891 sont des vulnérabilités dans Apache Camel qui affectent les versions : 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. L'exploitation de ces vulnérabilités peut permettre à des attaquants d'exécuter des méthodes interne...

dnschef-ng

!NOTE This is an updated version of DNSChef originally written by @iphelix root@kitploit: | | v0.7 | | / | | | | | | | / | ' / |/ | ' \ / \ || ' \ / | | | | | | \ \ | | | | / | | | | | | | ,|| ||/|| |||| || ||, | / | |/ D O C U M E N T A T I O N DNSChef is a highly configurable DNS proxy for...

user-scanner v1.5.2

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 1080+ total scan vectors —including 200+ email-integrated sites and 880+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames...

ROOT-OS-DEBIAN-13-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-24882 CVE-2026-24882 in gnupg2 - Patched by Root

Root has patched CVE-2026-24882 in the gnupg2 package for Root:Debian:13. Multiple fixed versions available...

otp-bot

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

SMSBotBypass

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

CVE-2026-84909

The Custom Twitter Feeds WordPress plugin (Tweets Widget / X Feed Widget) is vulnerable to Stored Cross-Site Scripting via the 'buttoncolor' shortcode attribute in all versions up to and including 2.8.0 , caused by insufficient input sanitization and output escaping . Authenticated attackers with...

CVE-2026-84909 Custom Twitter Feeds <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-82731

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-92619 Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter

The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the wpbcajaxoptionsave AJAX action. The vulnerability exists because the handleajaxsave function applies per-option safeguards only to names explicitly registered via...

CVE-2026-92619 Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter

The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the wpbcajaxoptionsave AJAX action. The vulnerability exists because the handleajaxsave function applies per-option safeguards only to names explicitly registered via...

EUVD-2026-82729

The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the wpbcajaxoptionsave AJAX action. The vulnerability exists because the handleajaxsave function applies per-option safeguards only to names explicitly registered via...

CVE-2026-92619

The Booking Calendar plugin for WordPress (all versions up to 11.8.2 ) is vulnerable to Privilege Escalation via the wpbc_ajax_option_save AJAX action. The root cause is that handle_ajax_save() only enforces per-option safeguards for names registered via register_option_policy(); any unregistered...

EUVD-2026-82725

The Download Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.3.68 via the duplicate function hooked on admininit. This is due to the handler only verifying the generic 'editposts' capability and a plugin-wide static nonce NONCEKEY...