Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053346 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053252 advisory. In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking unless I'v...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053409 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed...

Exploit for Code Injection in Grafana

CVE-2026-27876: Grafana SQL Expressions Arbitrary File Write t...

CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ Uso simple Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Ejemplo de configuración: root@kitploit: git clo...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 Zimbra — Collaboration Suite RCE --- Zimbra...

CVE-2021-3493

CVE-2021-3493 — Escalada de Privilegios Local de OverlayFS en Ubuntu Una prueba de concepto funcional para CVE-2021-3493 , una vulnerabilidad de escalada de privilegios local en la implementación de OverlayFS del kernel de Ubuntu. Un usuario sin privilegios puede montar un sistema de archivos...

CVE-2026-43499_OPPO-MT6835

CVE-2026-43499 / PoC de GhostLock para OPPO MT6835 Este repositorio conserva una instantánea de investigación compacta para la cadena de explotación estilo GhostLock dirigida a un dispositivo basado en OPPO MT6835. Alcance Árbol de código fuente del exploit en exploit Prueba de concepto mínima en...

google-poc

Para reproducir el CVE-2025-13425 solo sigue los pasos a continuación: Paso 1: Clona el código fuente fresco de osv-scalibr: root@kitploit: $ git clone https://github.com/google/osv-scalibr Paso 2: Elimina el código mencionado en el commit de la corrección...

pwnkit_safety_check

What is PwnKit PwnKit exploits a vulnerability in the SUID-root program /usr/bin/pkexec, allowing unprivileged users to gain full root privileges on Linux systems. This vulnerability has existed since 2009 and was publicly disclosed in January 2022. pwnkitsafetycheck.c PwnKit CVE-2021-4034 Safe...

CVE-2021-40373

CVE-playsms Existe una vulnerabilidad en playsms 1.4.3 que permite a posibles atacantes ejecutar código de forma remota. Cómo reproducir el RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms inicia sesión con admin:admin...

Node_CVE-2023-29017

CVE-2023-29017 | Remote Code Execution via vm2 Sandbox Escape WHS 4th Generation, Class 31 - Kim Geon-woo @gunwoo105 Vulnerability Summary vm2 is a Node.js sandbox library for executing untrusted JavaScript in a restricted environment. Under normal circumstances, code inside the sandbox should no...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...

CVE-2025-67158

CVE-2025-67158 — Revotech I6032W-FHW Resumen El firmware de la cámara IP Revotech I6032W-FHW contiene una vulnerabilidad de omisión de autenticación en el endpoint /cgi-bin/jvsweb.cgi. El dispositivo no valida los campos user.name y user.digest incluidos en las solicitudes de API basadas en JSON,...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026–24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026–24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...

CVE-2024-45519-Zimbra-Real-Fix

CVE-2024-45519-Zimbra-Real-Fix Zimbra CVE-2024-45519 real fix - Official patch is incomplete CVE-2024-45519 - Zimbra Real Fix ⚠️ Warning CVE-2024-45519 is a critical RCE vulnerability CVSS 9.8 in Zimbra Collaboration Suite. Many administrators think they are not protected after applying the...

Exploit for Classic Buffer Overflow in Apple Macos

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-...

dbdtct

dbgdtct Desctiption dbgdtct is a Python-based tool designed to help you detect if a web application is deployed in debug mode—a critical misconfiguration that can expose sensitive information and increase the risk of exploitation in production environments. Installation root@kitploit: git clone...

WG-CVE-2026-1555-Linux

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝...

CVE-2025-9074-POC

CVE-2025-9074-POC Proof-of-Concept exploit for CVE-2025-9074 ⚠️ Legal Disclaimer This PoC is released for educational and authorized security testing purposes only. Unauthorized exploitation of systems is illegal and unethical. Use this PoC only on environments you own or have explicit permission...