CVE-2026-27145

cve-id ⚡ Простое использование Используйте этот проект только в безопасных и авторизованных средах, таких как: Локальные виртуальные машины Контейнеры Docker Изолированные лабораторные среды Авторизованные среды тестирования на проникновение Пример настройки: root@kitploit: git clone cd Пример...

CVE-2021-21551

CVE-2021-21551 Prova de conceito de exploit para CVE-2021-21551, a vulnerabilidade decorre de endereços fornecidos pelo utilizador serem passados como argumentos para uma chamada memmove, permitindo uma leitura/escrita arbitrária ioctls 0x9B0C1EC4 e 0x9B0C1EC8, bem como o parâmetro de endereço...

CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 POC 📍 GDB ब्रेकपॉइंट्स root@kitploit: GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the...

CVE-2026-35616

cve-id ⚡ सरल उपयोग इस प्रोजेक्ट का उपयोग केवल सुरक्षित और अधिकृत वातावरण में करें, जैसे: स्थानीय वर्चुअल मशीनें डॉकर कंटेनर पृथक प्रयोगशाला सेटअप अधिकृत पैठ परीक्षण वातावरण उदाहरण सेटअप: root@kitploit: git clone cd उदाहरण उपयोग: root@kitploit: Install dependencies Run the project उपरोक्त कमांड को...

cve-2025-5548-freefloat-ftp-walkthrough

CVE-2025-5548 – FreeFloat FTP Server 1.0 Procedura dettagliata Repository in cui documentiamo passo dopo passo l'analisi e lo sfruttamento controllato della CVE-2025-5548 su FreeFloat FTP Server 1.0 all'interno di un ambiente di laboratorio. In questo progetto non ci limitiamo a eseguire un explo...

droidground

DroidGround Sito web | Demo Nelle tradizionali sfide CTF , è comune nascondere le flag in file su un sistema, richiedendo agli attacker di sfruttare vulnerabilità per recuperarle. Tuttavia, nel mondo Android questo approccio non funziona bene. I file APK sono facilmente scaricabili e reversibili,...

apple-positional-audio-codec-invalid-header

CoreAudio 패치CVE-2025-31200에 대한 개념 증명, iOS 18.4.1에서. 설명 글은 https://blog.noahhw.dev/posts/cve-2025-31200/ 에 있습니다. 업데이트 2025/05/27 이를 제한된 범위이지만 임의 쓰기로까지 발전시킬 수 있었습니다. 설명 글은 곧 올라옵니다. 직접 확인하려면 패치 이전 버전의 macOS 15.4.1에서 빌드해야 합니다. check-mismatch lldb 훅을 사용하여간단한 harness로 오디오를 재생하는 방식 오디오를 재생하면 쓰기를 확인할 수...

CVE-2026-27771

cve-id ⚡ Einfache Nutzung Verwenden Sie dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokale virtuelle Maschinen Docker-Container Isolierte Laboreinrichtungen Autorisierte Penetrationstest-Umgebungen Beispielsetup: root@kitploit: git clone cd Beispielnutzung: root@kitploit:...

EUVD-2026-66672

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-74771

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-74771

Dell PowerProtect One versions 20.1.0.0 and below are affected by an Authorization Bypass Through User-Controlled Key vulnerability. A low-privileged attacker with remote network access could exploit this flaw to cause information tampering , with no user interaction required. The CVSS 3.1 base s...

git-dumper

git-dumper Uno strumento per scaricare un repository git da un sito web. Installazione Può essere installato facilmente con pip: root@kitploit: pip install git-dumper Utilizzo root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR...

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

CVE-2026-80575

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from user space cs40l50add copies the custom data of an FFPERIODIC/FFCUSTOM effect straight from the ffeffect the user passed to EVIOCSFF, without requiring it to hold anything:...

CVE-2026-18252

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...

Github Enterprise - Remote Code Execution

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-78966

Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78966

Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...