CVE-2026-8461

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-86299 Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...

CVE-2026-86299

Linksys RE7000 (version 2.0.15) is affected by an OS command injection in the PingTest Handler component. The vulnerable function is platform_event_pingTest in /cgi-bin/json.cgi?PingTest, where manipulation of the pingTestIp, pingTestPktSize, or pingTestTimes arguments allows an attacker to injec...

EUVD-2026-72349

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...

CVE-2026-4480

excute exploit: root@kitploit: python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Reception + Created DocumentInfo with payload: |...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

DIRTY FRAG Detection with Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering for the Dirty Frag kernel LPE - Ubuntu / RHEL / Debian / Amazon Linux What is Dirty Frag? CVE-2026-43284 / CVE-2026-43500 is a Linux kernel Local Privilege Escalation LPE that chains two independent...

CVE-2021-27876

CVE-2021-27876 Unauthenticated RCE exploit for Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA auth bypass to SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentication bypass via SHA hash manipulation in the NDMP protocol| 9.8 Critical CVE-2021-27877|...

CVE-2020-7882

CVE-2020-7882 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2026-54420

CVE-2026-54420 LiteSpeed cPanel ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below...

CVE-2026-43284

Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-43284 📚 Introduction The exploit chain, classified as a Local Privilege Escalation LPE , allows an unprivileged user to obtain root access on virtually all modern Linux distributions running kernels released since 2017, spanning...

CVE-2024-52011

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

shai-hulud-scan

shai-hulud-scan A Claude Code skill that scans machines for indicators of compromise IOCs from the Mini Shai-Hulud supply chain worm CVE-2026-45321, CVSS 9.6. What is Mini Shai-Hulud? A self-propagating supply chain worm that compromised 170+ npm/PyPI packages on May 11, 2026 - including...

CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 & CVE-2025-32463 – Advanced PoC Lab This repository provides a container-based lab and detailed PoC for two critical sudo vulnerabilities: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape Research & Credit Original research by...

CVE-2026-20230

CVE-2026-20230 - Cisco Unified CM ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone...

lehack-2026-challenge

LeHack 2026 Challenge A 3-tier challenge demonstrating impact of direct disk mounting. Challenge Overview Level| Goal| Technique ---|---|--- 1| Access the unencrypted disk| Set boot cmdline to init=/bin/bash in grub 2| Crack vault1 LUKS| Extract header → hashcat → unlock & mount vault 3| Crack...

CVE-2025-67038

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-2991

KiviCare = 4.1.2 - Authentication Bypass CVE-2026-2991 PoC 📜 Description CVE-2026-2991 is an authentication bypass vulnerability in the KiviCare – Clinic & Patient Management System EHR WordPress plugin affecting all versions up to and including 4.1.2. The plugin exposes a public REST endpoint at...

CVE-2026-21858

CVE-2026-21858 n8n Workflow Automation Platform - Remote Code Execution A security research tool for detecting CVE-2026-21858, a critical remote code execution vulnerability in the n8n workflow automation platform. Table of Contents Vulnerability Summary Affected Versions Technical Analysis...

probo

Probo Open-source GRC platform for engineers. Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. It covers the full GRC lifecycle: risk identification, control tracking, vendor risk, data privacy, access reviews, audit programs, and...

EvilAhenk

CVE-2026-6508 EvilAhenk is a critical security vulnerability in the LiderAhenk Central Management System architecture that allows all clients to execute code with 'root' privileges on each other Unauthorized RCE & Lateral Movement. How the System Works In LiderAhenk, the management panel/central...