CVE-2026-31431

CVE-2026-31431 — Local Privilege Escalation via AFALG 2026-04-29 — I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: root@kitploit: musl-gcc -static -Os -o exploit...

VMWare-CVE-Check

VMWare-CVE-Check Usage: ./example.py/sh list.txt...

CVE-2023-23752

CVE-2023-23752 Description This repository contains Python and Bash scripts that serve as ports of the original Proof of Concept PoC written in Ruby for the vulnerability CVE-2023-23752 in Joomla! CMS versions 4.0.0 through 4.2.7 made by 'noraj' Alexandre ZANNI. An access control flaw was...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina Info : New Microsoft Office zero-day used in attacks to execute PowerShell Summary On the 29th of May 2022, the NaoSec team, an independent Cyber Security Research Team, discovered a malicious Office document shared on Virustotal. This...

CVE-2024-36821

CVE-2024-36821 The public reference that contains the minimum require information for the vulnerability covered by CVE-2024-36821 The original video with PoC you may find on the video - https://www.youtube.com/watch?v=6vHno0ik7JY The PoC: 1. Connect to the router witnin UART conenction 2. Using...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. FIRST: I AM NOT RESPONSIB...

CVE-2020-4463

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability CVE-2020-4463 IBM Maximo Asset Management is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...

s2-048

s2-048 s2-048 के लिए एक्सप्लॉइट, CVE-2017-9791। root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

CVE-2020-1611

Juniper Junos Space 19.4R1 से पहले के संस्करणों में स्थानीय फ़ाइल समावेशन भेद्यता CVE-2020-1611 PoC Juniper Junos Space 19.4R1 से पहले के संस्करण स्थानीय फ़ाइल समावेशन भेद्यता के प्रति संवेदनशील हैं। एक सामान्य उपयोगकर्ता अधिकार वाला हमलावर इस भेद्यता का शोषण कर सकता है। "Download Report" फ़ंक्शन...

CVE-2025-0133

CVE-2025-0133 भेद्यता स्कैनर CVE-2025-0133 रिफ्लेक्टेड XSS भेद्यता का पता लगाने के लिए Palo Alto GlobalProtect Gateway & Portal में एक Bash-आधारित स्वचालित स्कैनर उपकरण जो nuclei और shodanx का उपयोग करता है। लेखक : तिथि : 2025-06-23 गंभीरता : मध्यम CVE ID : CVE-2025-0133 भेद्यता प्रकार :...

CVE-2025-48384

CVE-2025-48384 PoC सावधानियाँ यह रिपॉजिटरी सुरक्षा शिक्षा के उद्देश्य से बनाई गई है। कृपया इसका दुरुपयोग न करें। इस कमजोरी के लिए निर्देशिका नाम में \r शामिल करना आवश्यक है, इसलिए Linux/Unix प्रणालियाँ प्रभावित होती हैं। नीचे प्रभावित Git संस्करण दिए गए हैं। v2.43.x श्रृंखला - v2.43.7 से कम v2.44...

CVE-2023-40294-and-CVE-2023-40295

While I was running boron in my environment, I happened to stumble upon 2 heap buffer overflows in libboron libboron.so.2 version 2.0.8 when processing slightly malformed input. This has been officially tested on both Mac x8664 and Linux x8664: Files for reproduction reproduction.zip Compiling...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: root@kitploit: git clone...

-exploit-lab

-exploit-lab Exploits Python cve-2019-0708 – by HackHeart 🧠 Code Review & Porting - Python 2 → Python 3 This exploit was originally written in Python 2, which is no longer supported by modern systems. To ensure compatibility and maintain future-proof tooling, the entire codebase has been carefull...

copyfail-rs

copyfail-rs Multi-vector PoC + paired detection for CVE-2026-31431 CopyFail. Includes a novel PAM auth-bypass vector that no other public PoC ships. Detection mode catches what AIDE / Wazuh / OSSEC / Tripwire structurally cannot. Single static binary. 108 KB. nostd musl. Demo root@kitploit:...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Shell Script to mitigate CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache Installation root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Usage Complete fix and suggested way to mitigate the vulnerabilty This...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...

clone_and_pwn

Headers Exploit Title: Clone and Pwn Date: June 4th, 2018 Exploit Author: Alejandro Caceres Vendor Homepage: https://git-scm.com/ Software Link: https://git-scm.com/downloads Version: arbitrary code is executed on git client versions In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15....

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe What is it ? Disclosed on March 7, 2022 by Max Kellerman2, CVE-2022-0847 is a vulnerability in the Linux kernel versions 5.8 to 5.16.11 that allows attackers to overwrite read-only or immutable files and escalate their privileges on the victim's system...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC for CVE-2023-20198 Vulnerability information and exploit usage offered by smokeintheshell See references Endpoint, http content type and headers management have been modified from other existing POCs to work in situations in which other exploits fail...