CVE-2017-1000112-Adpated

CVE-2017-1000112-Adpated POE code for CVE-2017-1000112 adapted to both funtion on a specific VM and Escape a Docker...

CVE-2025-55130

CVE-2025-55130 - Node.js Permission Model Symlink Escape root@kitploit: / | | | | |/ \ / \ | | | | / | // \ | | || | || || || | | | | \ | \ \ | | | | | | |/|| \ ||| ||/||| | || | || | |/ |//||// Node.js Permission Model Bypass via Crafted Symlinks Discovered by natann @ JFrog Overview A path...

CVE-2026-66493

Path Traversal in File Operations Delete / Copy / Move PhocaCommander ≤ 6.1.3 — Authenticated Admin Manipulates Files Outside Webroot SUMMARY The file action handler in PhocaCommander constructs source and destination paths from attacker-controlled base64-encoded parameters pathfrom, pathwhere...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

coolify-cve-2025-66209-66213

Avisos de Seguridad de Coolify - CVE-2025-66209 a CVE-2025-66213 Reportero: 0xrakan Vendedor: coollabsio/coolify Versiones Afectadas: v4.0.0-beta.451 Versión Corregida: v4.0.0-beta.451 Gravedad: Crítica CVSS 9.4 Resumen Se descubrieron cinco vulnerabilidades críticas de inyección de comandos...

Zapscape

⚡ Zapscape - Your Computer's Safety Net, Simplified ⬇️ DOWNLOAD ZAPSCAPE NOW 🛡️ What Is Zapscape? Zapscape is a friendly tool that helps protect your computer from a hidden threat called a "KVM escape." Think of it as a digital shield that keeps your personal files, photos, and information safe...

CVE-2025-9074-PoC-Bash

CVE-2025-9074-PoC-Bash The original PoC is: https://github.com/j3r1ch0123/CVE-2025-9074. This is new PoC in bash since not all docker containers has python installed, and mostly this should be run from inside a container. Steps From inside the container use the following to find vulnerable docker...

exploit-js2py

CVE-2024-28397 - Escape de Sandbox de js2py Descripción La vulnerabilidad CVE-2024-28397 afecta a las versiones de js2py hasta v0.74, una biblioteca de Python que permite ejecutar código JavaScript dentro del intérprete de Python. El fallo se encuentra en la implementación del método...

CVE-2026-51992

CVE-2026-51992 Within ClickHouse, a feature exists that allows a user with the correct permissions to create dictionaries in order to interact with different databases and run specific queries on them. For PostgreSQL, SELECT queries are wrapped in a COPY QUERY TO STDOUT statement before being...

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass dos métodos para obtener el contenido de la flag: 1. copiarlo desde el host al directorio montado del contenedor; 2. usar una reverse shell para obtenerlo;...

CVE-2026-27626-POC

CVE-2026-27626: OliveTin password-argument command injection OliveTin lets an admin define "actions": shell commands with parameterized arguments that users can trigger from a web UI or API. Before templating a user-supplied value into the shell command, OliveTin is supposed to run it through...

s6_pcie_microblaze

PCI Express DIY hacking toolkit General information Contents SP605 board configuration Software configuration Examples Using Python API Practical DMA attacks Option ROM attacks Troubleshooting Building project from the source code General information This repository contains a set of tools and...

Node_CVE-2023-29017

CVE-2023-29017 | Ejecución remota de código mediante escape de sandbox vm2 WHS 4th 31st Class - Kim Geonwoo @gunwoo105 Resumen de la vulnerabilidad vm2 es una biblioteca de sandbox para Node.js que permite ejecutar JavaScript no confiable en un entorno restringido. En condiciones normales, el...

CVE-2024-28397-exploit

js2py Sandbox Escape CVE-2024-28397 Exploit para ejecución remota de comandos RCE mediante escape del sandbox en js2py = 0.74. Permite ejecutar código arbitrario en el sistema anfitrión a través de evaluación de JavaScript insegura. Vulnerabilidad CVE : CVE-2024-28397 Componente : js2py Versiones...

js2py-Sandbox-Escape-CVE-2024-28397-RCE

CVE-2024-28397 Exploit de Escape de Sandbox de js2py Una colección de scripts de exploit dirigidos a la vulnerabilidad de escape de sandbox de js2py CVE-2024-28397 que permite la ejecución de código arbitrario a través de la introspección de objetos de Python. 🔍 Resumen de la Vulnerabilidad La...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability Overview CVE-2024-49039 is a Windows Task Scheduler Elevation of Privilege EoP vulnerability that allows an authenticated attacker to escape the AppContainer sandbox, elevating from Low integrity AppContainer to Medium...

CVE-2018-20162-digi-lr54-restricted-shell-escape

layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...

CVE-2019-5736-PoC

Usage PoC was created to the scenario were victim is executing for example docker exec sh. Before running exploit it's required to overwrite sh binary in the container file system: root@kitploit: printf '!/proc/self/exe' /bin/sh After that, when victim executes exec command, runc binary in the ho...

CVE-2024-28397-js2py-Sandbox-Escape

Introducción 中文 js2py es un paquete popular de Python que puede evaluar código JavaScript dentro del intérprete de Python. Es utilizado por varios scrapers web para analizar código JavaScript en sitios web. Existe una vulnerabilidad en la implementación de variables globales dentro de js2py, que...

CVE-2025-9074-Poc

RCE no autenticado en la API de Docker CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux en ejecución local se conecten a la API del motor de Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientement...