cve-2026-33067

CVE-2026-33017 — Langflow 未認証RCE Nucleiテンプレート Nucleiテンプレートは、CVE-2026-33017 — Langflow ≤ 1.8.2 における、公開フロービルドエンドポイントから到達可能な未認証のリモートコード実行脆弱性を検出します。 root@kitploit: POST /api/v1/buildpublictmp/flowid/flow 脆弱なハンドラは、攻撃者が制御する data フローグラフを受け入れ、グラフビルド中に data.nodes.data.node.template.code.value...

react-rsc-cve-2025-55182-lab

CVE-2025-55182 实验环境 — React 服务器组件远程代码执行 用于教育用途的实验环境，演示 CVE-2025-55182 — React 服务器组件中因 Flight 协议反序列化器的原型污染导致的关键（CVSS 10.0）远程代码执行漏洞。 免责声明： 本仓库仅用于教育和授权的安全研究目的 。未经授权访问计算机系统是非法的。作者对滥用本材料不承担任何责任。仅对您拥有或已获得明确书面许可的系统进行测试。使用本代码即表示您同意对自己的行为负责。 快速开始 root@kitploit: 1. 克隆 git clone...

cve-2019-6250-lab

CVE-2019-6250 — libzmq 预认证 RCE 实验环境 针对 CVE-2019-6250 的端到端可用 RCE 利用链 + 可复现实验环境。该漏洞是 libzmq v2decodert::sizeready 中的预认证堆缓冲区溢出。通过 uint64t 指针算术溢出，未认证对等端可在 ZMTP/2.0 线上路径覆盖相邻的 msgt::contentt::ffn 函数指针，然后经由 TCP socket 关闭触发：v2decodert → inprogress.close → 。...

hacktivity-vulns-exploits-lab

漏洞、漏洞利用与远程访问载荷 — 实验报告 我对 Hacktivity 网络安全实验室工作表 "漏洞、漏洞利用与远程访问载荷" （利兹贝克特大学道德黑客与渗透测试课程）的演练与分析。 内容涵盖软件漏洞如何导致任意代码执行、绑定型与反弹型 Shell 的区别、Metasploit 框架，以及两个真实 CVE 在刻意配置为易受攻击的训练虚拟机上的端到端利用过程：...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

EUVD-2026-70142

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2026-84671

CVE-2026-84671 affects the Jenkins File Parameter Plugin in versions 425.v3fa_801681b_5e and earlier . The vulnerability stems from Stapler data binding , which allows an attacker with low privileges to write files to arbitrary locations on the Jenkins controller file system , potentially leading...

CVE-2026-78689 NGINX ngx_http_js_module vulnerablility

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

EUVD-2026-70143

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

CVE-2026-84670

Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...

EUVD-2026-70140

Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...

CVE-2026-84670

Jenkins Performance Plugin versions 1015.v09ca_52b_3370e and earlier fail to restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller. An attacker with Item/Configure permission can leverage this to execute...

CVE-2026-84645

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

EUVD-2026-70111

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

CVE-2026-84645

Jenkins 2.579 and earlier (LTS 2.568.2 and earlier) contains a deserialization vulnerability (SECURITY-3972). Objects implementing PersistenceRoot—types that store configuration in independent top-level files such as global configuration and jobs—can appear as nested field values in user-submitte...

CVE-2023-34468

CVE-2023-34468 漏洞利用工具 概述 本仓库提供了一个基于 Python 的漏洞利用工具，针对 CVE-2023-34468 ——Apache NiFi 0.0.2 至 1.21.0 版本中存在的一个严重远程代码执行漏洞（CVSS 9.8）。该工具允许已认证用户通过操纵内嵌触发器的 H2 数据库连接字符串来执行任意代码。 ⚠️ 警告： 仅限教育和授权测试用途。未经授权访问计算机系统属违法行为。 漏洞详情 CVE ID： CVE-2023-34468 受影响版本： Apache NiFi 0.0.2–1.21.0 影响： 远程代码执行（RCE） CVSS 评分： 9.8（严重）...

CVE-2026-49009

root@kitploit: ▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀...

CVE-2026-23744-PoC

CVE-2026-23744-PoC استغلال MCP RCE لينكس PoC لاستغلال /api/mcp/connect لتنفيذ الأوامر عن بُعد. المتطلبات root@kitploit: pip install requests الاستخدام root@kitploit: python3 exploit.py مثال: root@kitploit: python3 exploit.py mcp.something.com الإعداد عدّل داخل السكربت root@kitploit: attackerip =...