CVE-2026-25050

CVE-2026-25050 – Authentication Timing Attack This repository contains a Proof of Concept demonstrating a timing attack affecting the NativeAuthenticationStrategy.authenticate method. This PoC is provided as a technical demonstration for blog / research purposes. Vulnerability The authentication...

copy-fail-tiny-elf-CVE-2026-31431

Copy Fail Tiny ELF - CVE-2026-31431 Minimal 436-bytes exploit for Copy Fail, thanks to the power of golfing Magic This ELF ultra golfs the exploit by being totally unmapped, rwx, and by using itself conditionally as the ELF payload to use to poison the cache. More cursed ELF internals golfs comin...

cve-2024-21762-poc

cve-2024-21762-poc CVE-2024-21762 is a critical vulnerability in Fortinet's FortiOS and FortiProxy products, located in their SSL VPN component. This vulnerability allows unauthenticated remote attackers to execute arbitrary code or commands on the target system through specially crafted HTTP...

pwncat_pwnkit

pwncatpwnkit Introduction The purpose of this module is to attempt to exploit CVE-2021-4034 pwnkit on a target when using pwncat. There is no need to setup any directories, compile any source or even have gcc on the remote target; the pwnkit module takes care of this automatically using the pwnca...

CVE-2021-40449-NtGdiResetDC-UAF

CVE-2021-40449-NtGdiResetDC-UAF A POC for CVE-2021-40449. Only tested on 1809, the code is a bit rough, but it's a good experience for me. Instead of using the ThreadName method, user-space memory allocation is used...

copyfail-rs

copyfail-rs تنفيذ بلغة Rust لثغرة CVE-2026-31431 Copy Fail — بدائية كتابة في ذاكرة التخزين المؤقت للصفحات في نواة لينكس عبر AFALG splice. 中文文档 / Chinese README CVE-2026-31431 يتيح تنفيذ algifaead في نواة لينكس لمستخدم غير مميز كتابة بيانات عشوائية في ذاكرة التخزين المؤقت للصفحات لأي ملف قابل...

CVE-2026-23723-POC

CVE-2026-23723 PoC - WeGIA Authenticated SQL Injection Exploit Helper Authenticated Error-Based SQL Injection in WeGIA ≤ 3.6.1 GHSA-xfmp-2hf9-gfjp | Official Advisory POC Original Author / Reporter : ViniCastro2001 GHSA Published by : nilsonLazarin project maintainer This lightweight Python scrip...

cpanel-cve-2026-41940-ioc

CVE-2026-41940 IOC Scanner Detection script for the cPanel/WHM authentication bypass CVE-2026-41940 affecting all cPanel versions after 11.40. This is a rewrite of the upstream cPanel detection script with fixes for false positives and added log correlation. What it does Scans...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation CVE-2025-21298 delivered via a malicious RTF attachment. Investigation of the alert from LetsDefend On 4 February...

Dirty-Frag-Analysis

Dirty Frag Deep Technical Analysis CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Linux kernel local privilege escalation vulnerability — PoC reverse engineering · Shellcode breakdown · Patch principles · Detection script Vulnerability Overview Dirty Frag exploits two independent vulnerabilities,...

CVE-2021-45416

CVE-2021-45416 Reflected Cross-site scripting XSS vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the searchterm parameter in the modules/Scheduling/Courses.php script. Vendor: francoisjacquet Vendor Website: https://www.rosariosis.org/ Affected Product: RosarioSIS...

struts_cve-2024-53677

Proof-of-Concept Setup test environment root@kitploit: » git clone [email protected]:0xPThree/strutscve-2024-53677.git » cd strutscve-2024-53677 » sudo docker build --ulimit nofile=122880:122880 -m 3G -t struts-6.3.0.1 . » sudo docker run -p 8081:8080 --ulimit nofile=122880:122880 -m 3G --rm...

CVE-2026-1529

CVE-2026-1529 Keycloak Exploit Tool CVE-2026-1529 : Keycloak - Unauthorized organization registration via improper invitation token validation ⚠️ WARNING : This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. 📋 Table of...

AxHunter — Updated!

AxHunter PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family — xhunter1.sys v2023.12.7.78 CVE-2026-3609 and xhunter2.sys v2026.6.1.192 CVE-2026-15430. Workspace layout Cargo workspace, three crates: root@kitploit: AxHunter/ ├── Cargo.toml workspace manifest ├── axhunter-lsa/ shared crate ...

Terrminus-CVE-2026-2406

Terminus - CVE-2026-24061 Scanner & Exploitation Framework A security analysis engine for CVE-2026-24061 Telnet NEWENVIRON authentication bypass and privilege escalation vulnerability. Overview Terminus is a professional security research tool designed for authorized penetration testing and...

copy-fail-rs

This repository does not have a README...

poc-cve-2025-69219

CVE-2025-69219 apache airflow unsafe deserialization to RCE 1. copy poc.py to your Airflow dags directory. 2. trigger the poc workflow from the UI. 3. check task logs for execution output...

RAMnesia-Attack

This research presents a comprehensive analysis of two critical classes of attacks on the hardware memory of modern computer systems using DDR5 memory: Phoenix Rowhammer Attack CVE-2025-6202 and RAMnesia Attack CVE-2023-39910 . Both attacks demonstrate fundamental vulnerabilities in the processin...

rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

copy-fail-go

Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: This program is highly dangerous and experimental. Manual cleanup is required to clear the exploit. Use at your own risk! Technical Writeup original repo run check /usr/bin/su before run: root@kitploit: user@pc:$ hexdump -n 300 -x /usr/bin/su...