VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

rootOS

rootOS Tries to use various CVEs to gain sudo or root access. All exploits have an end goal of adding ALL ALL=ALL NOPASSWD: ALL to /etc/sudoers allowing any user to run sudo commands. Run root@kitploit: python root.py Exploits Name| CVE| Date| Links ---|---|---|--- ARDAgent| CVE-2008-2830|...

drupwn

Drupwn v1.0.4 Description Drupwn claims to provide an efficient way to gather drupal information. Enumeration Exploitation Further explaination on our blog post article Supported tested version Drupal 7 Drupal 8 Execution mode Drupwn can be run, using two seperate modes which are enum and exploit...

CVE-2026-8461

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2025-67038

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

hichipreset

well i need to add some stuff here it's cve exploit, can we consider this as an exploit? i dont think so, it's more than a cve "exploiter", i dont like to call this such as that. use this for education purposes only, of course...

CVE-Scanner

CVE-Scanner 🔍 CVE-Scanner एक उपकरण है जो CVE-2021-42287, CVE-2021-42278 और अन्य सुरक्षा समस्याओं से जुड़ी कमज़ोरियों को स्कैन और शोषण करने के लिए डिज़ाइन किया गया है। यह परियोजना सुरक्षा पेशेवरों और शोधकर्ताओं को उनके सिस्टम में जोखिमों की पहचान करने और उन्हें कम करने का एक सीधा तरीका प्रदान करने...

internal-privesc-poc

Internal Privilege Escalation POC Library This library provid...

eCPPT-Penetration-Testing-Reports

eCPPT Penetration Testing Reports Penetration testing lab rep...

Oracle Java SE <= 8u451-b50 Security Update (Jul 2025) - Windows

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Androxgh0st Malware Compromises Servers Worldwide for Botnet Attack

By Deeba Ahmed Veriti Research exposes surge in Androxgh0st attacks, exploiting CVEs and building botnets for credential theft. Patch systems, monitor for web shells, and use behavioral analysis to protect yourself. This is a post from HackRead.com Read the original post: Androxgh0st Malware...

CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC has updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to include additional Malware...

CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC have updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to include additional detection...

CVE-2021-37291

creationtimestamp| type| source ---|---|--- 2022-04-11 22:16:13+00:00| seen| https://t.me/cibsecurity/40497 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-13...

Keep Attackers Out of VPNs: NSA, CISA Offer Guidance

Unsecured VPNs can be a hot mess: Just ask Colonial Pipeline which got pwned by the REvil ransomware crooks with an old VPN password or the 87,000 at least Fortinet customers whose credentials for unpatched SSL-VPNs were posted online earlier this month. Vulnerabilities in VPN servers are like...

CVE-2020-3580

creationtimestamp| type| source ---|---|--- 2021-04-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=577 2021-06-24 13:34:08+00:00| published-proof-of-concept| https://t.me/ptswarm/48 2021-06-25 18:25:12+00:00| exploited| https://t.me/cibsecurity/25709 2021-06-26...

Exploit for CVE-2020-1938

CVE-2020-1938TomcatAjpScanner Batch scanning of Tomcat AJP v...

CVE-2019-2000

creationtimestamp| type| source ---|---|--- 2019-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46356...

CVE-2017-10688

creationtimestamp| type| source ---|---|--- 2017-07-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42299...

konqueror3.5-latest.txt

On Fri, Oct 13, 2006 at 01:11:24PM -0400, Josh Bressers wrote: Use CVE- for this issue. the redhat persons means for THIS: the png is well formed, but the redhat person wasn't elligible to know it. ------------------- IMG, DIV width: 16394px; height: 262160px; position: absolute; f3c...