CVE-2019-1388

CVE-2019-1388 CVE-2019-1388 Abuser de la boîte de dialogue de certificat UAC Windows Description : Cet exploit CVE tend à abuser de la boîte de dialogue de certificat UAC Windows pour exécuter le lien de l'émetteur du certificat en tant qu'utilisateur NT Authority et ouvrir un navigateur qui est...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

schrodingers-toctou

Schrödinger's TOCTOU "...the definition of 'sane compiler' grows ever looser." The binary you run is not the program you wrote. The compiler optimizer rewrites your source in ways you never see — and some of those changes can silently and legally turn seemingly secure code into vulnerable binarie...

cve-2025-29384-poc

CVE-2025-29384 Preuve de Concept d'Exploitation Présentation Ce dépôt contient une preuve de concept PoC avancée pour CVE-2025-29384 , une vulnérabilité critique de débordement de tampon basé sur la pile découverte sur le routeur Tenda AC9 exécutant la version de firmware V15.03.05.14multi. Cette...

CVE-2025-68116

CVE-2025-68116 작성자: @x0root 취약점: 브라우저 렌더링 가능 업로드를 통한 저장형 XSSStored Cross-Site Scripting, SVG / HTML 영향받는 소프트웨어: FileRise 참고: GHSA-qrcv-vjvf-fr29는 FileRise 웹 UI미리보기 창 내에서 SVG가 렌더링되지 않도록 하는 완화 조치를 도입했습니다. 이 보고서는 해당 완화 조치의 우회—구체적으로 백엔드 공유/다운로드 엔드포인트—를 문서화한 것이며, GHSA-35pp-ggh6-c59c / CVE-2025-68116으로...

clawk v0.4.0

Give a coding agent its own disposable Linux machine, not yours. -lightgrey Install · Quickstart · Why a VM? · How it works · Compared to · FAQ · Docs A coding agent is only useful when you let it actually do things: install packages, run the code it writes, start servers, use the network. On you...

Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software

CVE-2025-20333 - Complete Research & Exploitation Toolkit...

cve-2017-8917

step 1 - download all the files, and has python3 step 2 - install dependency pip install -r requirements.txt step 2.1 - if the dependencies failed to install, might be some Linux restriction, try to use virtual env python3 -m venv venv source ./venv/bin/activate pip install -r requirements.txt st...

CVE-2018-2628

Prueba de vulnerabilidades Subir shell Método 1: Método 2: Ejecutar shell Obtener meterpreter root@kitploit: msf use exploit/multi/script/webdelivery msf exploitmulti/script/webdelivery set target 3 target = 3 msf exploitmulti/script/webdelivery set payload windows/meterpreter/reversetcp payload ...

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

[SECURITY] [DLA 4764-1] libdbi-perl security update

Debian LTS Advisory DLA-4764-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 31, 2026 https://wiki.debian.org/LTS Package : libdbi-perl Version : 1.643-3+deb11u2 1.643-4+deb12u2 CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043...

CVE-2022-21907

CVE-2022-21907 Description root@kitploit: POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by Malwareman at 2022-09-17. Detail root@kitploit: HTTP Protocol Stack Remote Code Execution Vulnerability. Similar to...

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Ivanti Connect Secure RCE 탐지를 위한 Python 익스플로잇 POC 스캐너 이 스크립트는 CVE-2025-22457 에 취약할 수 있는 Ivanti Connect Secure, Policy Secure 또는 ZTA 게이트웨이를 식별하는 데 도움을 줍니다. 이 취약점은 조작된 X-Forwarded-For 헤더를 통해 웹 프로세스에서 트리거되는 심각한 비인증 스택 기반 버퍼 오버플로우입니다. 또한 HTTP 응답에서 버전 정보를 스크래핑하여 원격 대상의 버...

USBvalve v1.0.1

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

oieh-router-checker

OIEH Router Checker A Windows program that checks with a single click whether your router is affected by the Chinese backdoor ENDLESSDOORS No installation required · No administrator rights required · No external data transmission What Is This? In August 2026, security firm VulnCheck discovered a...

follina

follina POC All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools MSDT on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence. Usage root@kitploit: usage: follina.py -h...

CVE-2025-27591-PoC

CVE-2025-27591 Proof Of Concept CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service before version 0.9.0. The issue arose due to the creation of a world-writable directory at /var/log/below. An attacker could exploit this vulnerability by manipulating symlinks...

CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. How does this detection method work? This Nuclei template detects Oracle E-Business Suite instances vulnerable to CVE-2025-53072 and CVE-2025-62481 by...

libunwind_CVE-2015-3239_AfterPatch

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

ACEDcup

ACEDcup ACEDcup 도구는 Java 바이너리 역직렬화 공격ACED을 위한 페이로드 생성기입니다. Apache Commons FileUpload 버전 = 1.3 CVE-2013-2186 및 Oracle JDK 버전 7u40 대상 이 공격은 라이브러리나 Java의 최신 버전에서도 작동합니다. 모든 디렉토리에 모든 콘텐츠를 업로드할 수 있지만, 이 상황에서는 파일 이름예: uploadf71d354772ed4ae190fe0d319115cd4200000000.tmp을 제어할 수 없습니다. 하지만 일부 경우에는 유용할 수 있습니...