poc_monitor

pocmonitor A short scraper looking for a POC of CVE-2024-49112 Setting a cron job to run the script every 4 hours will keep the updates in place. The alerting can be customized but used Discord webhook to alert a Discord channel. 0 /4 cd /root/monitorscript && /usr/bin/python3 pocmonitor.py...

CVE-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Target commit: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Summary Field| Detail ---|--- CVE| CVE-2026-2005 Type| Heap buffer overflow Component| contrib/pgcrypto/pgp-pubdec.c — pgpparsepubencsesskey Impact| RCE as...

CVE-2020-35729

Information root@kitploit: Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...

masq

Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...

CVE-2025-4517-POC

CVE-2025-4517 Exploit NOTES This exploit and description are written by AI. If you find a mistake or issue, please let me know! This exploit was tested and confirmed working. Thank you! Overview This exploit leverages CVE-2025-4517 , a critical vulnerability in Python's tarfile module that allows...

pe-bear

PE-bear PE-bear 是一个跨平台的 PE 文件逆向工具。其目标是提供快速灵活的“第一印象”，适用于恶意软件分析师，稳定且能够处理畸形 PE 文件。 PE-bear 的特征库： SIG.txt（更新于 2022 年 10 月 17 日）- 包含来自PEid's UserDB 的特征——由 crashish 提供的脚本转换而来 构建版本 📦 ⚙️ 下载最新的发布版本。 Windows 打包 也可通过以下方式获取： Chocolatey Scoop WinGet（winget install pe-bear） 测试构建 🧪 最新的测试构建 （早于官方发布）可从 AppVeyor...

smt878u-ionstack-poc

smt878u-ionstack-poc Pure-C, host-assisted re-root proof of concept for Samsung Galaxy Tab S7 SM-T878U / gts7l against CVE-2026-43499 IonStack / GhostLock. The runtime chain uses native C/ELF components only. It does not require Python, Java, DEX, appprocess, or a JVM on the Android target. ADB i...

setcred

FreeBSD setcred2 — research artifacts This subdirectory collects the write-up and working exploits for the setcred2 stack buffer overflow in FreeBSD 14.x kernel. The vulnerability itself is fully documented in setcred.txt. The short version: kernsetcredcopyinsuppgroups uses sizeofgroups where...

cve-2020-14882

cve-2020-14882 Bash script to exploit the Oracle's Weblogic Unauthenticated Remote Command Execution - CVE-2020-14882 Usage ./cve-2020-14882.sh...

SysTrace

SysTrace 2.0 ptrace-based Linux syscall monitor and sandbox for analyzing ELF binaries. SysTrace runs a target inside an isolated Linux namespace environment, traces its system calls and child processes, applies rule-based detection and weighted risk scoring, then uses a Random Forest classifier ...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" This repo is a bad Epoll validator for aarch64 kernels based on exploit already exists for x86. Linux Kernel Local Privilege Escalation viaepoll Use-After-Free Race Condition Field| Detail ---|--- CVE| CVE-2026-46242 Nickname| Bad Epoll Type| Use-After-Free UAF via ra...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI Confused Deputy Vulnerability - Security Research Verification Project Important Notice This repository is a derived build repository, affiliated with the original upstream repository. Role| Repository| Description ---|---|--- Main repository|...

CVE-2026-39987.py

CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. HOW TO USE : The only change it has to be made is to the change the HOST variable in the script. After changing the HOST variable execute the script in your Terminal like the...

CVE-2026-52618

CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars spawncmd0, cmd.slice1, shell: true re-joins an argument array into a single /bin/sh -c string without escaping, so a shell metacharacter in an extraVars value supplied to the executeDeployment MCP...

ghostdebug

GhostDebug GhostDebug is a Windows x64 debugger prototype composed of a native debugging DLL and a .NET Framework command-line client. It is intended for debugging targets that use debugger-detection checks. For background on the design, see Developing an undetected debugger on Windows...

cve-2021-41773-and-cve-2021-42013

cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...

blueshrimp

Prueba de concepto para CVE-2025-48593 basada en el análisis del parche. No deberías preocuparte por esto. Por lo que puedo decir, los teléfonos NO son vulnerables a CVE-2025-48593. El problema solo afecta a dispositivos Android que admiten actuar como auriculares / altavoces Bluetooth, como...

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

CVE-2020-8816

CVE-2020-8816 Un script de Python para explotar CVE-2020-8816, una vulnerabilidad de ejecución remota de código en Pi-hole. Este script utiliza las técnicas encontradas por François Renaud-Philippon para lograr la ejecución remota de código en un Pi-hole que ejecute una versión de la interfaz web...

CVE-2025-55182

CVE-2025-55182 A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. 🚀 Installation root@kitploit: wget -q -O /usr/bin/CVE-2025-55182 https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/CVE-2025-55182 && chm...