584856 matches found
Kernelhub
CVE-2003-0352 Describe Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. ImpactVersion Product| C...
RLSA-2026:71641 Important: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...
libxml2 security update
An update is available for libxml2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...
scanner-for-CVE-2025-55182-vulnerability
🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...
cve-2025-2082-POV
CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style This repository demonstrates a Proof of Vulnerability PoV simulating a critical memory corruption flaw inspired by CVE-2025-2082, discovered in Tesla's VCSEC Vehicle Controller Security component. The vulnerability allows an attacker to...
log4shell-test-exploit
Test exploit of CVE-2021-44228 log4shell Preparation root@kitploit: Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git ...
ProxyNotShell-PoC
Working PoC for CVE-2022-41040 and CVE-2022-41082 A.K.A ProxyNotShell Requirement: pip install requestsntlm2 requests Usage: root@kitploit: python pocaug3.py Creds: ProxyShell PoC script from: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc's blog post...
CVE-2022-1388
CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...
page-table-exploitation
page-table-exploitation A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example...
CVE-2025-55182
What is CVE-2025-55182? Also known as React2Shell, this vulnerability refers to a structural flaw in React Server Components where prototype pollution occurs during data deserialization, enabling RCE. Affected versions are React 19.0.0, 19.1.0, 19.1.1, 19.2.0, Next.js 15.x 15.0.0 15.5.6, 16.x...
CVE-2017-1000117
git-client-rce This PoC is only for educational purpose!!! Test GIT Repo for git-client-rce PoC CVE-2017-1000117 https://marc.info/?l=git&m=150238802328673&w=2 This CVE affects all the git clients v2.14.1 Execute following on test system to see PoC : $git clone --recursive...
hot-jar-swapping-urlclassloader
URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. Tested on MacOS with OpenJDK And also...
CVE-2025-52691
CVE-2025-52691 This repository contains a safe Proof of Concept PoC to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability. CVE-2025-52691 – SmarterMail Version Detection PoC 📌 Description This...
POC-CVE-2026-18729
Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...
ENLBufferPwn
ENLBufferPwn CVE-2022-47949 CVE:| CVE-2022-47949 ---|--- CVSS v3.1:| 9.8/10 Critical Authors:| PabloMK7, Rambo6Glaz, Fishguy6564 Reported:| August 8th, 2021 Mario Kart 7 April 14th, 2022 for the impacted WiiU and Switch games Disclosed:| December 22nd, 2022 Table of contents Description...
ciscoasa_honeypot
Cisco ASA honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Contact: [email protected] A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability It is released under the MIT license for the use of the...
CVE-2019-0232
CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...
CVE-2022-29078
CVE-2022-29078 vuln ejs 3.1.6 docker Setup root@kitploit: git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Usage root@kitploit: http://127.0.0.1:49160/ Exploit In browser...
wp2shell-poc-fulljs
WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...