2599718 matches found
HelakuruV.1.1-DLLHijack
DLL Hijacking Vulnerability in Helakuru Summary The Helakuru Desktop version 1.1v operates on both 64-bit and 32-bit architectures. During testing, it was identified that the program attempts to load wow64log.dll, which is not included by default in modern Windows operating systems. This results ...
indicator-intelligence
Indicator-Intelligence NOTE : You should definitely use it for legal activities. Please See; USAGEPOLICY.md LICENSE Description Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files ScreenShot Done Releated domains, IPs collect. HTTP...
EventLogin-CVE-2025-29969
EventLogin - CVE-2025-29969 EventLogin is a Time-of-check time-of-use vulnerability in the MS-EVEN protocol. The vulnerability enables low-privileged users to write arbitrary files to a remote machine, effectively bypassing the need for an Administrator account for a remote write. There are two...
Monitorizer
Monitorizer The Ultimate Subdomain Monitoring Framework Installation ❗ Disclaimer --- Admin users are able to execute code on the local server make sure to change the default password at otherwise use it at your own risk Using docker root@kitploit: $ curl...
ghostlock-h8q
GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Most of this code is based on @polygraphene's fork of the original. Heavy modifications were required because the main primer used select for most published variants of the exploit does not properly align with the rtmutexwaiter...
GhostTask
Ghost Scheduled Task Inspired by WithSecure's research on Scheduled Task Tampering, they explained the feasibility of creating a scheduled task solely through registry key manipulation. Such an approach can bypass the generation of scheduled task creation event logs, such as 4698 and 106, providi...
CVE-2021-40539
Exploitation code for CVE-2021-40539 Details about exploitation can be found here...
CVE-2018-14667
CVE-2018-14667 After spending many time to understand and correctly exploit this CVE, I decided to build a repo on the RichFaces 3.X RCE bug and share the HOWTOs step by step with the community. 0x00 : Introduction on RichFaces 3.X bug On Monday, November 19, Joao F M Figueiredo published a well...
PENeL
PENeL - Powershell with Embedded .NET Library Program that prepares a .NET DLL Library to run embedded in Powershell Script Created By: Guilherme Bacellar Moralez Th3 0bservator https://twitter.com/th30bservator Disclaimer This code is created and maintened only for a research proposal. Please do...
CVE-2026-87430
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87430
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87430
CVE-2026-87430 is a buffer overflow in the WebRTC component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can potentially execute arbitrary code inside the sandbox by serving a crafted HTML page to the user, requiring user interaction. Chromium assigned a Low security severi...
CVE-2026-87430
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74479
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
honeypot-auditor
root@kitploit: .. | :: H-AUDITOR :: v0.9.0 :: "DIALING IN... CARRIER DETECTED" :: | |------------------------------------------------------------------------------| | "warez? nah. headers. we trade banners, not bins." | | "if it answers any password, it ain't production — it's a lure." | | "respe...
CVE-2026-87601
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74477
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87601
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87601
A race condition in the V8 JavaScript engine in Google Chrome prior to 153.0.8010.36 allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. Chromium rates the severity as Low , while the CNA CVSS v3.1 score is 7.5 (High) with high ...