EUVD-2026-71503

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError. enterexception64 does not write ESRELx for any exception type, so the construct...

CVE-2026-80873 KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError. enterexception64 does not write ESRELx for any exception type, so the construct...

CVE-2026-80873

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError. enterexception64 does not write ESRELx for any exception type, so the construct...

Voidgate

VOIDGATE Description: A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes such as msfvenom by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage root@kitploit: python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in...

moonwalk

moonwalk: DLL Base Address Finder This Rust library and CLI tool demonstrates an alternative method to find the base address of loaded DLLs without using a Process Environment Block PEB walk. This technique is particularly useful in scenarios where PEB walking might be detected or blocked. Branch...

EUVD-2026-70775

MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator. Unauthenticated attackers can send a crafted message with a negative length value to the MOOSDB port, causing an unhandled exception that terminates the database process...

CVE-2025-70886

CVE-2025-70886 A Proof of Concept PoC exploit for CVE-2025-70886, a persistent denial-of-service vulnerability in Halo CMS v2.22.4 and earlier that allows remote attackers to crash the admin comment interface by submitting malformed payloads. Basic Information Product Vendor: 凌霞软件 Vendor Website:...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts2 Vulnerability Detection and Exploitation Tool s2tool...

Apache-Dubbo-Hessian2-CVE-2021-43297

Deserialization during Apache Dubbo Hessian2 Exception Handling CVE-2021-43297 1. Import the two projects into two separate IDEA instances 2. First run org.apache.dubbo.samples.basic.BasicProvidermain to start the server 3. Then run org.apache.dubbo.samples.basic.BasicConsumermain to start the...

CVE-2021-43297-POC

CVE-2021-43297 Vulnerability Description Apache Dubbo Hessian-Lite 3.2.11 and earlier versions contain a potential RCE attack risk. When Hessian-Lite encounters a serialization exception, it outputs related information, which may trigger the toString method of certain maliciously crafted Beans,...

multiparty-CVE-2026-8161

CVE-2026-8161 Proof of concept of CVE-2026-8161 Multiparty Description [email protected] and earlier are vulnerable to denial of service through an uncaught exception. The parser stores uploaded fields and files in plain JavaScript objects and does not safely distinguish parser owned keys fr...

CVE-2025-31161

CVE-2025-31161 Warning: This tool is for authorized security testing and educational purposes only. Unauthorized use against systems you do not have explicit permission to test is illegal. Overview This tool is a proof-of-concept PoC for CVE-2025-31161 , a critical authentication bypass...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

DEBIAN-CVE-2026-18329

Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...

CVE-2026-18329

Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...

EUVD-2026-70207

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-18329

Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...

CVE-2026-18329

NGINX JavaScript (njs) and QuickJS (qjs) engines contain an authentication/authorization bypass in the ngx_http_js_module . When a js_access handler performs asynchronous request body processing and an exception is thrown before an explicit denial is returned, the phase fails open , allowing unau...

EUVD-2026-70138

Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...