CVE-2025-30406

CVE-2025-30406 Эксплойт PoC для ViewState Обзор Этот скрипт Proof-of-Concept PoC демонстрирует эксплуатацию десериализации ViewState для CVE-2025-30406 в ASP.NET приложениях. Он использует ysoserial для генерации вредоносной полезной нагрузки ViewState и отправляет её на указанный URL для...

CVE-2021-3129_exploit

CVE-2021-3129exploit Эксплойт для CVE-2021-3129 Настройка лаборатории: root@kitploit: $ git clone https://github.com/laravel/laravel.git $ cd laravel $ git checkout e849812 $ composer install $ composer require facade/ignition==2.5.1 $ php artisan serve Использование: root@kitploit: $ git clone...

RunC-CVE-2019-5736

RunC-CVE-2019-5736 Два PoC для CVE-2019-5736. См. Twistlock Labs с объяснением CVE-2019-5736 и PoC. PoC вредоносного образа во многом основан на PoC от q3k, так что вся заслуга принадлежит ему. Запуск PoC Обратите внимание, что запуск PoC перезапишет бинарный файл runc на хосте. Рекомендуется...

CVE-2024-9264

CVE-2024-9264 Grafana 인증 후 DuckDB SQL 인젝션 RCE, 파일 읽기 개념 증명 PoC 이 PoC는 CVE-2024-9264의 악용을 시연하며, 인증된 사용자가 DuckDB SQL 쿼리를 수행하여 파일시스템의 임의 파일을 읽거나 원격으로 임의 코드를 실행할 수 있음을 보여줍니다. 임의 코드 실행은 Grafana v11.0.0에서만 가능합니다. 파일 읽기는 모든 취약한 버전에서 가능합니다. 설정: 다음을 통해 필요한 종속성을 설치합니다: root@kitploit: pip install -r...

mingw-sqlite security update

An update is available for mingw-sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large...

RLSA-2026:61242 Important: mingw-sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

CVE-2025-21298

내용 이것은 CVE-2025-21298 - Windows OLE 원격 코드 실행 취약점CVSS 9.8에 대한 개념 증명입니다. 메모리 손상 PoC 이며, 익스플로잇이 아닙니다. 전체 패치 차이via ghidriff: LINK 취약점 취약점은 ole32.dll!UtOlePresStmToContentsStm에 있습니다. 이 함수의 목적은 OLE 저장소 내의 "OlePres" 스트림에 있는 데이터를 적절한 형식의 데이터로 변환하여 동일한 저장소의 "CONTENTS" 스트림에 삽입하는 것입니다. 이 함수는 저장소 객체에 대한...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Этот эксплойт использует адреса и шеллкод для Citrix VPX 13.1-48.47. Полное описание доступно по ссылке здесь. Использование Для сборки шеллкода требуется NASM. root@kitploit: $ sudo apt install nasm Включенный шеллкод загружает и запускает shell-скрипт с удаленного...

CVE-2026-12894

A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails. The issue exists in the component responsible for looking up data values ReflectionValueResolver, which fails to properly block access to sensitive Java internal functions...

WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability

Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability discovered by d.v4ns3c in WordPress Plugin SigmaForms Pro – AI Generated Forms versions = 1.4.5...

CVE-2026-42588

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...

CVE-2026-42563

A flaw was found in Dulwich, a pure-Python implementation of Git file formats and protocols. An attacker can exploit this vulnerability by crafting malicious file paths within an untrusted Git branch. When a victim merges this branch, the ProcessMergeDriver component incorrectly substitutes the...

unicorn_pe

Unicorn PE Unicorn PE — это проект/фреймворк для инструментирования на основе unicorn, предназначенный для эмуляции выполнения кода PE-файлов Windows, особенно упакованных. Этот проект заархивирован и больше не поддерживается. В качестве преемника рекомендуется sogen. Возможности Дамп PE-образа и...

CVE-2026-38192

pluck-CMS-4.7.20-code-injection-vulnerability В admin.php функция moduleaddtosite перебирает весь массив $POST, разделяет управляемые пользователем имена параметров с помощью explode'|', ... и напрямую конкатенирует их в data/settings/themes//moduleconf.php. Этот файл впоследствии будет включён в...

ModuleStomping

Часть 1 исследования Countercept по модульному стампингу — см. https://blog.f-secure.com/hiding-malicious-code-with-module-stomping . Полный текст соответствующей статьи в блоге доступен в каталоге Documentation...

CVE-2026-80671

A flaw was found in the Linux kernel's perf sched subsystem. Multiple vulnerabilities exist within the registerpid function when processing untrusted performance data. These include an integer overflow that can lead to out-of-bounds memory writes and a heap buffer overflow due to improper string...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE React Server Components의 Flight 프로토콜 역직렬화 취약점에 대한 PoC입니다. 이게 뭐야? Next.js 14+와 React 19는 클라이언트와 서버 간 통신을 위해 독점"Flight" 프로토콜을 사용합니다. 문제는 서버가 검증 없이 아무 모듈이나 로드한다는 것입니다. 그래서 childprocess를 실행하게 만들 수 있고, boom, RCE입니다. 사용법 root@kitploit: python CVE-2025-55182.py -t -p --cmd...

LibRaw: LibRaw: Buffer Overflow vulnerability in image processing

A flaw was found in LibRaw, an open-source library for processing raw image files. This vulnerability is a buffer overflow, which occurs in the stretch and fujirotate functions. A buffer overflow can allow an attacker to overwrite memory, potentially leading to a denial of service or the executio...

CVE-2026-80619

A flaw was found in the AppArmor security module of the Linux kernel. The aareplaceprofiles function was susceptible to a use-after-free UAF vulnerability. This occurred because the function accessed data after it had been deallocated, potentially allowing an attacker to cause a denial of service...

XSS2Shell

XSS2Shell ULTIMATE v3.0 Цепочка эксплойтов WordPress Pre-Auth XSS → RCE Разработано G0D150NE 📌 Возможности 🔍 Автоопределение XSS и версии WordPress 🎯 3 режима: Auto, XSS, Direct 📡 Callback-сервер для перехвата учётных данных 🐚 WebShell с несколькими методами выполнения команд 🔄 Персистентность cr...