versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

Xstream-1.4.17

Xstream-1.4.17 （以上Xstream Demo环境经本人搭建，漏洞利用环境以JDK1.8u131为准，现支持本地测试和HTTP远程发包） XSTREAM=1.4.17漏洞复现（CVE-2021-39141、CVE-2021-39144、CVE-2021-39150、CVE-2021-39152） 不提供本实验利用POC，仅展示复现利用效果，为避免恶意人员的利用，仅提供官网POC：http://x-stream.github.io/changes.html CVE-2021-39141（RCE）...

zipbrk

zipbrk 2.2.0 Zip break 是一款用于解析、修改和重新组装 zip 文件的工具，适用于多种任务。它设计为跨平台，并尽可能简化在不同系统间的移植。已在 Windows 9x/2k/XP、Windows Vista/7/8、Fedora 23/24/25/26/27、Kali、Debian 8/9、Qubes 3.2/4.0、Whonix 13/14、Ubuntu 10、FreeBSD 11 以及多种 Android 手机上测试通过。在 Linux/UNIX 机器上编译只需执行 gcc -o zipbrk zipbrk.c。Windows 用户可将文件导入默认的 Visua...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3...

missing-cve-nuclei-templates

Lista actualizada semanalmente de CVEs faltantes en el repositorio oficial de plantillas de nuclei Nota Este repositorio está 100% automatizado, por lo que puede haber errores, pero en general es bastante preciso. Ve a la sección "Cómo funciona" para entender cómo se recopilan los datos...

CVE-2022-RCE

CVE-2022-XXXX 反向辣鸡数据投放 CVE订阅 工具 利用 教程 Exploit POC RCE LOG4j 反序列化 JNDI Payload CVE-2022-20550 CVE-2022-20551 CVE-2022-20552 CVE-2022-20553 CVE-2022-20554 CVE-2022-20555 CVE-2022-20556 CVE-2022-20557 CVE-2022-20558 CVE-2022-20559 CVE-2022-20560 CVE-2022-20561 CVE-2022-20562 CVE-2022-20563...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

CLSA-2026-1789122433 TuxCare security update for django (4 CVEs)

TuxCare rebuilt django to address 4 CVEs. Fixed in 4.0.post18+tuxcare...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

osbuild-composer security update

176-1.0.2 - Rebuild for CVE-2026-33810, CVE-2026-33818, CVE-2026-39820, CVE-2026-42499,CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

CVE-2015-3246

CVE-2015-3246 y más cve-2015-3245, cve-2015-3246, cve-2015-3245, cve-2015-3246 Donar...

cves-2025-11187_15467_69418

No es un descubrimiento mío. Nunca llegué a montar una cadena completa, aunque es 80% explotable; bfcanary necesita un objetivo real. glhf CVEs...

Cisco-CVE-2026-20303-More

Cisco-CVE-2026-20303-More CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313 Donar...

AvTech-PoCs

AvTech PoC 集合 针对 CVE-2025-57199、CVE-2025-57200、CVE-2025-57201、CVE-2025-57202 和 CVE-2025-57203 的 PoC。 参见博客文章。...

CVE-2026-87493

creationtimestamp| type| source ---|---|--- 2026-09-10 04:48:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910...

CVE-Ubiquiti

CVE-Ubiquiti Vulnerabilidades de seguridad de Ubiquiti UniFi Este repositorio contiene información y recursos relacionados con las siguientes vulnerabilidades de seguridad de Ubiquiti UniFi: CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553...

POC-DUMP

POC-DUMP 我所发现的任何有趣 bug/漏洞的 Writeup 或脚本。 当前已收录的 CVE（持续增加中）： • CVE-2021-35475 • CVE-2022-36194 • CVE-2022-36667 • CVE-2022-36668 • CVE-2022-36669 • CVE-2022-37137 • CVE-2022-37138 • CVE-2022-37139 • CVE-2022-37140 • CVE-2022-3211 • CVE-2022-3231...