CTT-Enhanced-CVE-2026-46339-Exploit-Engine

CTT-Enhanced-CVE-2026-46339-Exploit-Engine A specialized Python framework that executes unauthenticated remote code execution via the 9Router Model Context Protocol MCP bridge by deploying a 33-layer temporal phase cascade, Riemann-Hadamard dispersion, and an 11 ns wedge filter to bypass...

mindmanager-poc

mindmanager-poc Affected application: MindManager23setup.exe Platform: Windows Issue: Local Privilege Escalation via MSI installer Repair Mode EXE hijacking race condition Discovered and reported by: Pawel Karwowski and Julian Horoszkiewicz Eviden Red Team Proposed mitigation:...

DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221

Technical Analysis and Proof-of-Concept: Temporal Memory Inconsistency in cldflt.sys CVE-2025-62221 DEMO Proof-of-Concept: Temporal Memory Inconsistency in cldflt.sys CVE-2025-62221 CVE-2025-62221: This repository provides a comprehensive technical analysis and a Proof-of-Concept PoC demonstratio...

mp-flipper

MicroPython Flipper Zero Allows you to use the power of Python natively on your Flipper Zero. The application is available on the official Flipper Lab. For details on how to programm your Flipper with Python, check out the documentation on GitHub pages. Disclaimer This FAP version requires about ...

Splunk-RCE-poc

Splunk RCE - PoC Proof of concept exploit for CVE-2023-46214, SVD-2023-1104 Usage The Splunk instance URL, username, password, reverse shell IP, and port are all required as command-line parameters. For example: root@kitploit: $ python3 CVE-2023-46214.py --url --username --password --ip --port...

rosettaflash

Rosetta Flash CVE-2014-4671 Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SW...

passgen

🔐 passgen — Generate passwords from the terminal A small Go CLI that generates secure random passwords with flexible character sets and exclusions. Uses crypto/rand for cryptographically secure randomness. If no charset flags are provided, all sets are enabled by default. Installation Go...

cupshax

CUPSHax Quick proof of concept for the recent CUPS exploit. I was planning to clean it up a lot more, but the embargo was lifted a lot sooner than expected, so the code is a bit rushed. For all the technical details you should honestly just read Evilsocket's writeup. This exploit was written afte...

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module Heap Buffer Overflow → RCE RCE confirmed successful — via heap overflow + GDB process injection, execute arbitrary commands in NGINX / OpenResty worker processes. Quick Start root@kitploit: One-click build NGINX image + execute RCE test ./run.sh nginx One-cli...

promptfoo v0.123.0

Promptfoo: LLM evals & red teaming promptfoo is a CLI and library for evaluating and red-teaming LLM apps. Stop the trial-and-error approach - start shipping secure, reliable AI apps. Website · Getting Started · Red Teaming · Documentation · Discord Promptfoo is now part of OpenAI. Promptfoo...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2025-32815: Infoblox NetMRI Authentication Bypass via Hardcoded Credentials CVE-2025-32814: Infoblox NetMRI Unauthenticated SQL Injection via...

CVE-2026-50522

CVE-2026-50522 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual...

magnolia-rce

Exploit Title: Magnolia DX Core 6.3.8 - Command Injection Date: 05/16/2025 Exploit Author: tmrswrr Version: 6.3.8 Vendor home page: https://docs.magnolia-cms.com/home/ Product: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Authenticate as an admi...

Cisco IOS XE Web UI - Command Injection

A vulnerability in the web UI component of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to improper input validation in the web UI. An attacker could exploit...

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

Dasan GPON Devices - Remote Code Execution

Dasan GPON home routers are susceptible to command injection which can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure Detector A non-intrusive detection script for SonicWall Secure Mobile Access SMA 1000 series appliances affected by CVE-2026-83548 pre-auth SSRF in the Work Place interface, CVSS 10.0 and CVE-2026-83549 post-auth OS command injection i...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Mitigation-Scripts There are multiple mitigation techniques you can use from the sk; https://support.checkpoint.com/results/sk/sk185033 1. Disable legacy client support. 2. Configure Remote Access to only use ike v2 There are scripts for both of those changes; Please...

SOARCA

Automate threat and incident response workflows with CACAO security playbooks Context and backgound Organisations are increasingly automating threat and incident response through playbook driven security workflow orchestration. The essence of this concept is that specific security events trigger ...