refinery

Binary Refinery root@kitploit: High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts that...

huawei-p10-cve-2017-8890-unlock

Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...

Node_CVE-2023-29017

CVE-2023-29017 | Remote Code Execution via vm2 Sandbox Escape WHS 4th Generation, Class 31 - Kim Geon-woo @gunwoo105 Vulnerability Summary vm2 is a Node.js sandbox library for executing untrusted JavaScript in a restricted environment. Under normal circumstances, code inside the sandbox should no...

CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE

CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE -orange 📋 Descripción CVE-2024-21182 es una vulnerabilidad de inyección JNDI no autenticada que afecta al componente Core de Oracle WebLogic Server. Permite a un atacante...

POC-GeoLeak-CVE-2026-52715

GeoLeak — PoC for CVE-2026-52715 Educational Proof of Concept for GeoLeak CVE-2026-52715, an unauthenticated SQL injection CVSS 9.3 in the GEO my WordPress = 4.5.5 plugin for WordPress. The swlatlng and nelatlng map boundary parameters are interpolated without sanitization into the WHERE clause...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Device-specific research port of CVE-2026-43499 IonStack PI write-what-where for the Canadian Galaxy Z Fold4 SM-F936W on firmware F936WVLU1AVGA. This repository is the Fold4 counterpart of CVE-2026-43499-S24U and CVE-2026-43499-A36. It captures current incomplete progress:...

xiaomi15-dada-cve-2026-64560

Xiaomi 15 dada CVE-2026-64560 Adaptación específica del dispositivo del proof of concept de Android CVE-2026-64560 de NebuSec para una compilación exacta del Xiaomi 15. Proporciona acceso root temporal para el arranque actual mediante un helper exclusivo de ADB-shell. !WARNING Esto es código...

CVE-2025-29927-PoC

CVE-2025-29927 — Next.js Middleware 授权绕过 验证 PoC 一个用于本地授权靶场 （VMware：Ubuntu 靶机 + Kali 攻击机）验证 CVE-2025-29927 （Next.js Middleware Authorization Bypass）的小型 GitHub 项目。 ⚠️ 免责声明 ：本项目仅用于安全教育、CTF 与你自己拥有/明确授权的靶场环境 。 严禁用于任何未授权系统。因滥用本项目造成的后果由使用者自行承担。 📋 目录 1. 漏洞档案 2. 漏洞原理（30 秒看懂） 3. 仓库结构 4. 靶场拓扑（VMware...

Exploit for Classic Buffer Overflow in Apple Macos

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

CVE-2026-5281

CVE-2026-5281 2026/06/27：Esta vulnerabilidad ha sido divulgada públicamente. Aunque los puntos de parche difieren, el enfoque general y la ruta de activación son completamente idénticos a los de mi PoC. Chromium commit commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD - 146.0.7680.71, tag:...

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the fl...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell Description This script is a penetration testing tool designed to exploit the CVE-2022-42889 vulnerability, also known as Text4Shell, within Apache Commons Text versions -param $PARAMETER -L $LHOST -P $LPORT...

exploitgym-unified

ExploitGym Unified Runner - 898 instâncias + Dashboard Live R...

cve-2025-55182

CVE-2025-55182 aka React2Shell Setup test enviornment root@kitploit: kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up POC Payload 1. RCE with response in body root@kitploit: POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever Content-Type:...

node9-proxy v2.8.3

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

CVE-2025-55287-POC

CVE-2025-55287-POC Authenticated Stored Cross-Site Scripting XSS in Genealogy app prior to 4.4.0 allows arbitrary JavaScript execution and privilege escalation from Editor+ role to Administrator. Summary Vulnerability type: Stored Cross-Site Scripting CWE-79 Affected component: 'Person' firstname...

CVE-2023-38646

CVE-2023-38646 Original script from securezeron During testing, I found that the reverse shell generated by this POC failed due to the trailing '=' character after base64 encoding. I made a slight modification to fix this issue. root@kitploit: Original reverse shell payload generation code...

CVE-2022-47872

CVE-2022-47872 maccms10 admin+ ssrf attacks Overview Manufacturer's website information：https://maccms.pro Source code download address ： https://github.com/maccmspro/maccms10.git Affected version: V2021.1000.2000 2.Vulnerability details https://github.com/maccmspro/maccms10/issues/22 Enter the...

CVE-2019-12937-ToaruOS

CVE-2019-12937 ToaruOS is an open-source computer operating system written in C, a hobbyist operating system developed by an undergraduate computer science student at the University of Illinois. ToaruOS runs on POSIX and x86 architectures. Its main features include support for processes and...