CVE-2026-45447

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2025-70849

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...

CVE-2026-54121

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2026-46331

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-23111

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-4020

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

mcpjam-to-root

⚠️ 免责声明 本仓库仅用于授权的安全研究、渗透测试和教育目的 。 请勿在未经明确授权的系统上使用本文所述的技术。 ⚡ MCPJam → Root 从 MCPJam Inspector RCE 到 root — CVE-2026-23744、JupyterLab 令牌泄露、内核执行与 OPSMCP 权限提升。 --- 📖 概述 本仓库记录了一条完整的 Linux 攻击链，从暴露的 MCPJam Inspector 实例一直到 root 级访问权限 。 该攻击链串联了开发者工具、本地服务、凭据处理和应用授权方面的多个弱点： root@kitploit: MCPJam Inspector │...

CVE-2026-0542

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-39987

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...

CVE-2026-10795-Lab

CVE Lab: CVE-2026-10795 - UpdraftPlus UpdraftCentral RPC Authentication Bypass Chained to Plugin Installation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-10795, an unauthenticated authentication bypass vulnerability affecting the UpdraftPl...

CVE-2025-32433.py

CVE-2025-32433.py This Python PoC simulates SSH message flows, including key exchange, channel open, and command requests, to analyze server behavior. Intended for controlled lab testing, it demonstrates protocol handling, pre-auth message processing, and payload interactions for research and...

MongoBleed

MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit A security research toolkit for MongoBleed -- a critical unauthenticated memory leak in MongoDB's zlib decompression that allows attackers to extract sensitive data from server heap memory without authentication. root@kitploit:...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GL.iNet Beryl AX Triple RCE PoC PoC for three unauthenticated command injection vulnerabilities CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 in the GL.iNet GL-MT3000 Beryl AX travel router firmware = 4.4.5. Full writeup:...

OpenSMTPD-CVE-2020-7247-

OpenSMTPD Remote Command Execution Vulnerability CVE-2020-7247 WHS 4th Park Solmin Original link: https://github.com/vulhub/vulhub/blob/43eae7170d09e7748c3aac64cd6a8e5af508a8ef/opensmtpd/CVE-2020-7247/README.md Overview OpenSMTPD is an SMTP server program used on Unix-like operating systems. It c...

CVE-2024-28397-Exploit-Automation

CVE-2024-28397 Exploit Automation A Python automation script for exploiting the js2py Sandbox Escape vulnerability CVE-2024-28397. This tool automates the payload generation and delivery process to achieve Remote Code Execution RCE on vulnerable instances. ⚠️ Legal Disclaimer Usage of this tool fo...

CVE-2024-8856

CVE-2024-8856 This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below "1.22.22" as vulnerable and logs results to "vuln.txt". Simple and efficient, it helps security researchers and admins detect and addres...

CVE-2026-82222

CVE-2026-82222 — GiveWP 作者： Rx019 CVSS： 10.0（严重） 类型： 未认证 PHP 对象注入 → 远程代码执行 插件： GiveWP give — 捐赠插件与筹款平台 受影响版本： 已修复版本： 4.16.8 描述 GiveWP 将捐赠者的 lastname 未经清理地存储在 PHP 会话中。当提交捐赠时未包含 givelast 字段，GiveWP 会直接将数据库中的原始值反序列化到会话中。这使得未认证攻击者能够通过捐赠者资料端点将 PHP 序列化对象注入 lastname，然后通过提交精心构造的捐赠来触发反序列化——从而利用 GiveWP...

BitLock-Crypto-Research

🛡️ BitLock Framework: Cryptovirology and C2 Ecosystem PoC This repository contains a comprehensive Proof of Concept PoC designed for the study of modern threat architectures. The project simulates a fileless attack environment with a command and control C2 infrastructure protected by elliptic curv...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC Validation Report for Microsoft Defender Purpose and scope of the report This report concerns the validation of the publicly described RoguePlanet PoC related to Microsoft Defender. The described technique was presented in the media on 10 June 2026 as a Local Privilege Escalation...

cats cats-14.0.0

CATS documentation is available at https://endava.github.io/cats/ REST API fuzzer and negative testing tool. Run thousands of self-healing API tests within minutes with no coding effort! Comprehensive : tests are generated automatically based on a large number scenarios and cover every field and...