cve-2019-6250-lab

CVE-2019-6250 — libzmq 预认证 RCE 实验环境 针对 CVE-2019-6250 的端到端可用 RCE 利用链 + 可复现实验环境。该漏洞是 libzmq v2decodert::sizeready 中的预认证堆缓冲区溢出。通过 uint64t 指针算术溢出，未认证对等端可在 ZMTP/2.0 线上路径覆盖相邻的 msgt::contentt::ffn 函数指针，然后经由 TCP socket 关闭触发：v2decodert → inprogress.close → 。...

hacktivity-vulns-exploits-lab

Vulnerabilidades, Exploits y Payloads de Acceso Remoto — informe de laboratorio Mi recorrido y análisis de la hoja de Hacktivity Cyber Security Labs "Vulnerabilities, Exploits, and Remote Access Payloads" curso de Ethical Hacking y Penetration Testing, Leeds Beckett University. Cubre cómo las...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

CVE-2026-84671

CVE-2026-84671 affects the Jenkins File Parameter Plugin in versions 425.v3fa_801681b_5e and earlier . The vulnerability stems from Stapler data binding , which allows an attacker with low privileges to write files to arbitrary locations on the Jenkins controller file system , potentially leading...

EUVD-2026-70142

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2026-78689 NGINX ngx_http_js_module vulnerablility

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

EUVD-2026-70143

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

EUVD-2026-70140

Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...

CVE-2026-84670

Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...

CVE-2026-84670

Jenkins Performance Plugin versions 1015.v09ca_52b_3370e and earlier fail to restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller. An attacker with Item/Configure permission can leverage this to execute...

CVE-2026-84645

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

EUVD-2026-70111

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

CVE-2026-84645

Jenkins 2.579 and earlier (LTS 2.568.2 and earlier) contains a deserialization vulnerability (SECURITY-3972). Objects implementing PersistenceRoot—types that store configuration in independent top-level files such as global configuration and jobs—can appear as nested field values in user-submitte...

CVE-2023-34468

CVE-2023-34468 Exploit Overview This repository provides a Python-based exploit tool for CVE-2023-34468 , a critical remote code execution vulnerability CVSS 9.8 in Apache NiFi versions 0.0.2 through 1.21.0. It allows authenticated users to execute arbitrary code by manipulating H2 database...

CVE-2026-49009

root@kitploit: ▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀...

CVE-2026-23744-PoC

CVE-2026-23744-PoC MCP RCE 漏洞利用（Linux） 用于利用 /api/mcp/connect 实现远程命令执行的 PoC。 环境要求 root@kitploit: pip install requests 使用方法 root@kitploit: python3 exploit.py 示例： root@kitploit: python3 exploit.py mcp.something.com 配置（在脚本中修改） root@kitploit: attackerip = "YOURIP" port = 4444 监听器 root@kitploit: nc -lv...

CVE-2026-25769

CVE-2026-25769 - 通过 Wazuh 集群中的不安全反序列化实现远程代码执行 针对 CVE-2026-25769 的概念验证漏洞利用程序，该漏洞为 Wazuh 集群中通过不安全反序列化实现的远程代码执行漏洞 使用方法： root@kitploit: $ python3 poc.py --cmd 'id' 受影响版本 Wazuh v4.14.1 免责声明 本工具仅用于教育和研究目的。请仅在您拥有或已获得明确测试许可的系统上使用。作者不对因使用本程序造成的任何滥用或损害负责。 QuimeraX Intelligence QuimeraX Intelligence 是一个先进的...

CVE-2025-59287

CVE-2025-59287 WSUS RCE 漏洞利用工具 针对 Windows Server Update Services WSUS 未认证远程代码执行漏洞的自动化利用工具。 漏洞详情 CVE 编号： CVE-2025-59287 CVSS 评分： 9.8（严重） 攻击向量： 网络 认证要求： 无需认证 影响： 以 SYSTEM 权限执行远程代码 功能特性 ✅ 全自动载荷生成 ✅ 自动下载 ysoserial.NET 依赖项 ✅ 内置反向 Shell 监听器 ✅ 跨平台支持（Windows/Linux/Mac） ✅ 使用 WSUS 硬编码密钥进行 AES 加密 ✅ PowerShe...