CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN 用于利用 Checkpoint Firewall VPN 中 CVE-2024-24919 漏洞的利用工具 安装： root@kitploit: git clone https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN 依赖： root@kitploit: pip install -r requirements.txt 帮助 root@kitploit: python3...

CVE-2019-5736-Custom-Runtime

CVE-2019-5736 自定义沙盒 概述 CVE-2019-5736 通过一个浅层的、自编写的容器运行时实现，以理解该漏洞利用。 该漏洞利用基于（且几乎全部拷贝自）twistlock 的 runc-poc：https://github.com/twistlock/RunC-CVE-2019-5736/tree/master/maliciousimagePOC 容器运行时 quarantine 详情请参见代码文档。 root@kitploit: Usage: quarantine OPTIONS BINARY and its ARGS --rootfs: mandatory Speci...

ShieldBreak

ShieldBreak - Windows Defender 0day vulnerability Microsoft h...

Exploit for Deserialization of Untrusted Data in Facebook React

💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗...

Exploit for CVE-2025-6934

CVE-2025-6934-Opal-E...

EUVD-2021-0522

Malware in sbrugna...

Exploit for CVE-2024-32019

⚠️ CVE-2024-32019 - PoC 📌 Affected Versions - = v1.45.0...

Exploit for SQL Injection in Vishalmathur Cloudclassroom-Php_Project

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable...

MagnusSolution magnusbilling 7.3.0 - Command Injection

Exploit Title: MagnusSolution magnusbilling 7.3.0 - Command Injection Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/magnussolution/magnusbilling7 Software Link: https://github.com/magnussolution/magnusbilling7 Version: 7.3.0 Tested on: Centos CVE : CVE-2023-30258...

Exploit for Use of Hard-coded Password in Zkteco Zkbio_Cvsecurity

ZKT-Eco-Bio-CVSecurity This rep...

Exploit for Cross-site Scripting in Snyk Advisor

Stored XSS snyk.io Discovery 19/03/23 CVE-2023...

Netfilter nft_set_elem_init Heap Overflow Privilege Escalation Exploit

An issue was discovered in the Linux kernel through version 5.18.9. A type confusion bug in nftseteleminit leading to a buffer overflow could be used by a local attacker to escalate privileges. The attacker can obtain root access, but must start with an unprivileged user namespace to obtain...

Backdoor.Win32.Destrukor.20 MVID-2022-0627 Remote Command Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/c790749f851d48e66e7d59cc2e451956B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Destrukor.20 Vulnerability: Unauthenticated Remote Command Execution...

Ransom.REvil MVID-2022-0597 Code Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/7ff073cc9e4e6750ba52135ba02ee531.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Ransom.REvil Vulnerability: Code Execution Description: REvil looks for and executes DLLs ...

Backdoor.Win32.NetSpy.10 Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/45d413b46f1d14a45e8fd36921813d62.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NetSpy.10 Vulnerability: Unauthenticated Remote Command Execution Description: The...

Backdoor.Win32.Verify.h Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/82641dabbb1f73dd775e200466a07ec1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Verify.h Vulnerability: Unauthenticated Remote Command Execution Description: The...

ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion Vulnerability

Exploit Title: ICEHRM 31.0.0.0S - Cross-site Request Forgery CSRF to Account Deletion Exploit Author: Devansh Bordia Vendor Homepage: https://icehrm.com/ Software Link: https://github.com/gamonoid/icehrm/releases/tag/v31.0.0.OS Version: 31.0.0.OS Tested on: Windows 10 CVE: CVE-2022-26588 1. About...

Backdoor.Win32.Cafeini.b Hardcoded Credential

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/b24c56abb4bde960c2d51d4e509d2c68B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Cafeini.b Vulnerability: Weak Hardcoded Credentials Family: Cafeini Type: PE32 MD5:...

ICEHRM 31.0.0.0S - Cross-site Request Forgery to Account Takeover Vulnerability

Exploit Title: ICEHRM 31.0.0.0S - Cross-site Request Forgery CSRF to Account Takeover Exploit Author: Devansh Bordia Vendor Homepage: https://icehrm.com/ Software Link: https://github.com/gamonoid/icehrm/releases/tag/v31.0.0.OS Version: 31.0.0.OS Tested on: Windows 10 1. About - ICEHRM IceHrm...

Backdoor.Win32.FTP.Nuclear.10 Hardcoded Credential

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9c23dad9ba11305fecf38bed46b0cec2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Nuclear.10 Vulnerability: Hardcoded Credentials Description: The malware builds...