CVE-2018-16509

CVE-2018-16509 Campo de pruebas Docker "Se descubrió un problema en Artifex Ghostscript anterior a la versión 9.24. La comprobación incorrecta de la «restauración de privilegios» durante el manejo de excepciones /invalidaccess podría ser utilizada por atacantes capaces de proporcionar PostScript...

CVE-2022-1388

CVE-2022-1388 Comprobación y exploit para CVE-2022-1388 Instalación: root@kitploit: python3 -m pip install -r requirements.txt Uso Individual : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – Ataque de deserialización NSKeyedUnarchiver en el servicio XPC simulación macOS/iOS Código del programa simulación en Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess,...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 Stack-Based Overflow to Remote-Code Execution via execution-flow hijacking & multiple-register manipulation exploitation; CVEs are: CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 Marked as N1 - N7 rop.py make sure you hosted...

cve-2024-10914-port

CVE-2024-10914 ported to rust and python because why not what is this cve-2024-10914 is a recently discovered 9.8 critical score vulnerability that affects some dlink routers. because those routers reached their eol support, dlink refuses to patch this vulnerability because "stop being poor and...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack Estos son solo algunos scripts que puedes usar para detectar y explotar la vulnerabilidad de Apache Struts CVE-2017-5638 Hay un MassScanner y un Exploiter, puedes usar el escáner para escanear masivamente una lista de URLs y luego explotarlas con el Exploiter. El Exploit...

CVE-2015-3073

CVE-2015-3073 Esta vulnerabilidad permite a atacantes remotos omitir las restricciones de la API en instalaciones vulnerables de Adobe Reader. Se requiere la interacción del usuario para explotar esta vulnerabilidad, ya que la víctima debe visitar una página maliciosa o abrir un archivo malicioso...

cve-2026-45033-class

Claude Code — git bare-repo / core.fsmonitor guard bypass PoC Proof-of-concept for the "malicious bare git repository →core.fsmonitor → code execution" vulnerability class cf. CVE-2026-45033 in GitHub Copilot CLI reproduced against Claude Code , defeating the extra bash permission guard Claude Co...

CVE-2023-27372-PoC

Esto es una prueba de concepto de la vulnerabilidad RCE CVE-2023-27372 en SPIP. Es una falla de deserialización que explota el uso peligroso de la etiqueta ENV durante la función de restablecimiento de contraseña spip.php?page=spippass dentro de /ecrire/balise/formulaire.php. Específicamente esta...

disable-RegisterSpoolerRemoteRpcEndPoint

disable-RegisterSpoolerRemoteRpcEndPoint Solución alternativa para la vulnerabilidad de ejecución remota de código de Windows Print Spooler CVE-2021-34527. Ver: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Actualización 2021-07-08: Microsoft publicó un parche Microsoft ya...

CVE-2026-91939

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize without allowedclasses restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads ...

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

DEBIAN-CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91738

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91741

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91741

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...