CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Python tarfile Filter Bypass via PATHMAX Symlink Escape Arbitrary file write throughfilter="data" / filter="tar" extraction Table of Contents Overview Vulnerability Details How It Works Affected Versio...

CVE-2023-21742

CVE-2023-21742 PoC Attention: It's only a PoC to leak the attribute/property, not RCE EXP. root@kitploit: POST /vtibin/webpartpages.asmx HTTP/1.1 Host: splab13 SOAPAction: http://microsoft.com/sharepoint/webpartpages/ConvertWebPartFormat Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — AXIS mediaclip.cgi OS Command Injection n-day research writeup & PoC — post-patch technical analysis of a CVSS 7.1 OS command injection vulnerability in the AXIS VAPIX Media Clip API, independently rediscovered and verified through black-box testing against an Axis device. Axis's...

CVE-2023-31014_Lab

CVE-2023-31014 Implicit Intent Hijacking Lab An educational Android Lab created based on the public report of CVE-2023-31014 in NVIDIA GeForce NOW for Android. It does not include NVIDIA source code, actual Action strings, or real authentication credentials. Facts confirmed from the public report...

CVE-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Target commit: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Summary Field| Detail ---|--- CVE| CVE-2026-2005 Type| Heap buffer overflow Component| contrib/pgcrypto/pgp-pubdec.c — pgpparsepubencsesskey Impact| RCE as...

CVE-2026-18963-Exploit

CVE-2026-18963 — Keycloak reset-credentials bypass → unauthenticated account takeover Knowing only a username or e-mail address , an unauthenticated attacker sets an arbitrary password on any Keycloak account. The password-reset e-mail is delivered to the real victim and is never needed — the...

CVE-2018-20343

CVE-2018-20343 This is a PoC for CVE-2018-20343, a vulnerability in Ken Silverman's Build Engine. The generated .map file triggers a buffer overflow and overwrites the stack as shown below: Open Watcom under DosBox 0.74-2: the analyst controls the stack Under FreeDos 1.2: the analyst controls EIP...

Open-Source-Threat-Intel-Feeds

Free Threat Intel/IOC Feeds This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. The CSV ThreatIntelFeeds is stored in a structured manner based on the Vendor, Description, Category and URL. The vendors offering ThreatIntelFeeds a...

Qlik-View-12.60-Including-SR-Stored-Cross-Site-Scripting-CVE-2022-42248

QlikView = 12.60 Including SR Stored Cross Site Scripting CVE-2022-42248 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision: 1.0 Impact: Stored cross-site scripting in QlikView Aj...

CVE-2024-8856

CVE-2024-8856: WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability Overview CVE-2024-8856 is a security vulnerability found in the WP Time Capsule plugin for WordPress that allows unauthenticated users to upload arbitrary files to the server. This can lead to remote code executio...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...

cve-2024-4577-lab

Environment Blueprint root@kitploit: Operating System Container: ubuntu:22.04 running under Windows WSL2. Web Server Layer: Apache2 with modactions, modcgi, and modcgid forced globally into the main apache2.conf. Language Interpreter: PHP 8.1.2 running strictly under CGI/FastCGI mode Server API...

setcred

FreeBSD setcred2 — research artifacts This subdirectory collects the write-up and working exploits for the setcred2 stack buffer overflow in FreeBSD 14.x kernel. The vulnerability itself is fully documented in setcred.txt. The short version: kernsetcredcopyinsuppgroups uses sizeofgroups where...

CVE-2024-38063-

CVE-2024-38063- Remotely Exploiting The Kernel Via IPv6 CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Marcus Hutchins Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A...

CVE-2026-8037-POC

CVE-2026-8037-POC Incluye detección de comandos ejecutables y getshell con un solo clic requiere un servicio desplegado en el servidor pco.yaml junto con nuclei permite una detección rápida Inicio rápido Modo interactivo root@kitploit: python go.py Introduzca la URL objetivo → seleccione el menú ...

CVE-2019-0232

Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...

CVE-2016-2386

CVE-2016-2386 SAP NetWeaver AS JAVA UDDI Component SQL Injection root@kitploit: POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78....

CVE-2025-25599

CVE-2025-25599 Detalles Bolt es un sistema de gestión de contenidos de código abierto construido utilizando el framework Symfony PHP. Durante una breve evaluación de seguridad, Certitude identificó varias vulnerabilidades, incluyendo una lectura arbitraria de archivos. Los usuarios con el rol...

CVE-2025-32044

CVE-2025-32044 — Moodle Unauthenticated REST API User Data Exposure Stack Trace Args Leak → Names, Emails, Password Hashes Overview CVE-2025-32044 is a high-severity CVSS 7.5 unauthenticated information disclosure vulnerability in Moodle LMS 4.5.0 through 4.5.2. The vulnerability lies in Moodle's...

Terminator_Killer

Terminator - Red Team Process Killer A kernel-mode process termination tool leveraging a vulnerable driver CVE-2026-0828 to kill protected processes from user mode. Compilation Requires MinGW-w64 GCC on Windows. Compile with: root@kitploit: g++ --% .\terminator.cpp -o terminator.exe -Oz...