CVE

CVE CVE, reports, research...

Zoho_CVE-2022-23779

ZohoCVE-2022-23779 Internal Hostname Disclosure Vulnerability Proof-of-Concept Exploit Step 1: curl -ILk https://IP:port/themes Step 2: Read the HTTP redirect response and anaylze the Location HTTP response header. PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

CVEs

My publicly published security advisories...

CVE-2024-27956

CVE-2024-27956 CVE-2024-27956...

Tough-Cookie-v2.5.0-Patched

Tough-Cookie v2.5.0 Patched - Prototype Pollution Fix Overview This repository contains a patched version of the tough-cookie package, version 2.5.0, to address the critical Prototype Pollution vulnerability CVE-2023-26136. The vulnerability allows attackers to manipulate the prototype chain by...

CVE-2021-26856

I have translated the chinese exploit at https://github.com/jsdryan/CVE-2021-26855 for english reader and people unfamiliar with golang just look at the png pictures...

CVE-2024-27348

CVE-2024-27348 This is a repository for Apache HugeGraph Remote Code Execution vulnerabilityCVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services: web: image:...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule これはオリジナルのエクスプロイトではありません。これはTHMボックス用に監査されたバージョンです。 以下は、オリジナル、tryhackmeボックス、およびそのボックスの私のwriteupへのリンクです： https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeamoneagentdeserialization.rb https://tryhackme.com/room/set...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo root@kitploit: git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon root@kitploit: sudo systemctl start docker.service Start Docker...

CVE-2023-23397-Patch

CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...

joomla_CVE-2017-8917

joomlaCVE-2017-8917 The "exploitation" was done only for an educational purpose in the context of the project for the Cyberspace Security class. All of the steps are described in the Romanian language...

CVE-2020-1938-Clean-Version

CVE-2020-1938-Clean-Version CVE-2020-1938GhostCat clean and readable code version Me...

libxml2-exploit

libxml2-exploit An example exploit for CVE-2017-7376 Install Download this repo and a vulnerable version of libxml2, e.g. v2.7.7: root@kitploit: git clone https://github.com/brahmstaedt/libxml2-exploit.git cd libxml2-exploit wget https://github.com/GNOME/libxml2/archive/v2.7.7.zip unzip v2.7.7.zi...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 is a Remote Code Execution in GitHub.com and GitHub Enterprise Server The vulnerability could be exploited by injecting commands into the git push command as follows : root@kitploit: git push -o '' origin master To review any exploitation of this vulnerability, ...

CVE-2018-8587-reproduction

このリポジトリには README がありません。...

Fastjson--CVE-2017-18349-

Fastjson--CVE-2017-18349-Cancel changes 将项目设置为一个Maven项目后执行注意,使用高版本的JDK可能会失败,建议使用版本为1.8.65的JDK FastjsondemoApplication.java 的main函数即可 TouchFile.java文件 root@kitploit: import java.lang.Runtime; import java.lang.Process; public class TouchFile static try Runtime rt = Runtime.getRuntime; String comman...

PwnKit-Hunter

Background Last week, a significant vulnerability in polkit’s pkexec was publicly disclosed link. By exploiting this vulnerability, attackers on a vulnerable host could easily gain full root privileges from any unprivileged user. Following the public disclosure of this “PwnKit” vulnerability, we...

CVE-2025-5548

Vulnerability Analysis and Exploitation Methodology Author: Anas Rami Module 6: Vulnerabilities - Master in Cybersecurity Objective: Technical proposal on vulnerability analysis, exploit development, and approach to 0-days, documenting the laboratory environment and practical cases. 1...

fix-cve-2026-3143

fix-cve-2026-3143 Diagnostics and remediation for CVE-2026-31431 copy fail Installation Copy the installation script to the clipboard and run it in the command line root@kitploit: sudo apt install git && cd && git clone https://github.com/ClimbMunchkin/fix-cve-2026-3143.git fix-cve-2026-3143 &&...

MALW

CVE-2007-4559 - Polemarch exploit Full working exploit for Polemarch server https://www.polemarch.org/, using CVE-2007-4559, allowing: Injection of a cryptominer for monero using TOR for better hiding. Injection of a rootkit targeting most common sysadmin tools. POC Proof of concept using...