Lucene search
+L

28508 matches found

Kitploit
Kitploit
•added 2026/09/29 6:43 a.m.•12 views

squid

SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 6:36 a.m.•10 views

CVE-2018-17182

CVE-2018-17182 Linux Kernel VMA-UAF Privilege Escalation Vulnerability CVE-2018-17182 About Google Project Zero security researchers released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel present since kernel versions 3.16 through 4.18.8...

7.8CVSS7.5AI score0.03206EPSS
SaveExploits5References1
Kitploit
Kitploit
•added 2026/09/29 6:07 a.m.•25 views

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 5:39 a.m.•20 views

DirtyClone

DirtyClone CVE-2026-43503 - Python PoC Non-official Python port of DirtyClone — a Linux kernel local privilege escalation vulnerability. This repository contains a working Proof of Concept that allows an unprivileged local user to gain root privileges by exploiting page-cache corruption via clone...

8.8CVSS7AI score0.00182EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/29 5:13 a.m.•10 views

Am-I-affected-by-Meltdown

Am I affected by Meltdown?! Meltdown CVE-2017-5754 checker What am I? Proof-of-concept / Exploit / Checks whether system is affected by Variant 3: rogue data cache load CVE-2017-5754, a.k.a MELTDOWN. The basic idea is that user will know whether or not the running system is properly patched with...

5.6CVSS6.9AI score0.84172EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/29 5:06 a.m.•15 views

cve-2020-8165-demo

CVE-2020-8165 Demo Yet another demo of CVE-2020-8165, though in a more realistic implementation than most. Background CVE-2020-8165 A deserialization of untrusted data vulnernerability exists in rails 5.2.4.3, rails 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in...

9.8CVSS7.5AI score0.45732EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/29 4:55 a.m.•13 views

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 A small, dependency-light Bash script that tells you whether your Linux system is exposed to the Copy Fail local privilege-escalation vulnerability CVE-2026-31431. The script is read-only : it never exploits the bug, never loads kernel modules, and never modifie...

7.8CVSS6.7AI score0.03437EPSS
SaveExploits243
Kitploit
Kitploit
•added 2026/09/29 4:41 a.m.•23 views

Dnsrr

DNSrr DNSrr is a tool written in bash, used to enumerate all the juicy stuff from DNS records, it uses different techniques like DNS Forward Bruteforce DNS Reverse Bruteforce DNS Cache Snooping DNS Zone Transfer To get you all the information that you can get, from a DNS server. Installation...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:40 a.m.•18 views

CVE-2025-27415-PoC

CVE-2025-27415 PoC Nuxt3 cache poisoning A repository for setting up the cache poisoning vulnerability environment that occurs in nuxt3 =3.0.0 3.16.0 Vulnerability Summary When a CDN is placed in front of a Nuxt server, and the CDN only stores the path excluding URL queries as the cache key, a...

7.5CVSS6AI score0.00383EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:39 a.m.•17 views

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation 📋 Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...

8.8CVSS7.4AI score0.0247EPSS
SaveExploits36
Kitploit
Kitploit
•added 2026/09/29 4:20 a.m.•17 views

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

8.8CVSS7.1AI score0.0247EPSS
SaveExploits38References1
Kitploit
Kitploit
•added 2026/09/29 4:14 a.m.•344 views

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 3:53 a.m.•13 views

CVE-2024-1065

CVE-2024-1065 — Page Cache Exploitation PoC Proof-of-concept exploit for CVE-2024-1065, a physical page use-after-free in the ARM Mali GPU kernel driver. The exploit demonstrates page cache exploitation : racing a freed MIGRATEMOVABLE page into the in-memory code image of a SUID binary, then...

7.3AI score0.00212EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 3:37 a.m.•17 views

RdpCacheStitcher

RdpCacheStitcher RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps. Using raw RDP cache tile bitmaps extracted by tools like e.g. ANSSI's BMC-Tools https://github.com/ANSSI-FR/bmc-tools as input, it provides a graphical user...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/29 3:21 a.m.•15 views

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

8.1CVSS7.6AI score0.89436EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/29 3:18 a.m.•18 views

MozCache

MozCache Bash script Simple shell script to perform forensic analysis of the Mozilla-Browsers cache Firefox, Iceweasel and Seamonkey. The script orders by date the files cached from a browser of the Mozilla family using the cache version 2. Together with the name of each file the script generates...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 2:41 a.m.•12 views

CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions root@kitploit: Next.js...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59References1
Kitploit
Kitploit
•added 2026/09/29 2:19 a.m.•13 views

NextSecureScan

NextSecureScan - Next.js-CVE-2025-29927 Middleware Vulnerability Scanner NextSecureScan is a comprehensive security scanner specifically designed to identify middleware-related authorization bypass vulnerabilities CVE-2025-29927 in Next.js applications. This scanner leverages explicit header...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
•added 2026/09/29 2:02 a.m.•16 views

phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Recently we found a vulnerability in /type.php of phpcms 2008 source code. When attackers send crafted requests like "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", evil content in this case "@unlinkFILE;assert$POST1;" will be written into cache file in this...

9.8CVSS8.5AI score0.20766EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 1:27 a.m.•21 views

ExifSmugglingPoC

Exif Smuggling A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG's Exif data. As a result, image caching such as that of a Web Browser can be used to passively download the payload. As a result, the example loader chromepoc.ps1 does not need ...

6AI score
SaveExploits0
Rows per page
Query Builder