Exploit for Unexpected Status Code or Return Value in Openbsd Openssh

sshhole 랩: CVE-2026-123158 로컬 격리 재현 musl libc를 쓰는 Alpine의 Ope...

Exploit for CVE-2026-123488

🔐 CVE-2026-123488 — Craft CMS SQL Injection...

Exploit for Improper Authentication in Hpe Arubaos-Cx

🛡️ Security Research, CVE Verification & Hardening Labs Aut...

Exploit for CVE-2026-118669

cortex9-oauthlib-token-grant-client-id-confusion-model Offlin...

Exploit for CVE-2026-114140

cortex9-nbconvert-output-filename-traversal-model Path-resolu...

Exploit for Path Traversal in Traefik

cortex9-traefik-replacepathregex-normalization-model Offline...

Exploit for CVE-2026-124450

CVE-2026-124450 OpenEMR before 8.3.0 Arbitrary File Read/Write...

Exploit for CVE-2026-73802

CVE-2026-73802 - Sandbox Escape to Host RCE Detailed Writeup...

Exploit for CVE-2026-124552

CVE-2026-124552 Webmin through 2.670 — stored XSS in the Shor...

Exploit for PHP External Variable Modification in Juniper Junos

Vulnerability Scanner for Juniper CVE-2023-36845 This vulnera...

Exploit for CVE-2026-98260

CVE-2026-98260 — Root access for Nothing Phone 3a / 3a Pro...

Exploit for CVE-2026-92080

CVE-2026-92080 — Pardus Boot Repair Mountpoint Escape Path tr...

Exploit for CVE-2026-123158

CVE-2026-123158 — laboratorio reproducible y validador "sshol...

ARMember CVE-2026-5073 SQLi probe

POST armdirectorypagingaction with SLEEP in orderby. !/usr/bin/env python3 -- coding: utf-8 -- """ARMember CVE-2026-5073 — orderby time-based SQLi.""" import re import time from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.wordpress import...

Kubio CVE-2025-2294 local file inclusion

Auxiliary read via kubio-site-edit-iframe-classic-template traversal. No application session — outputs file contents only. !/usr/bin/env python3 -- coding: utf-8 -- """Kubio CVE-2025-2294 — classic template path traversal file read.""" import re from kittysploit import from...

Profile Builder CVE-2026-15826 autologin

Auxiliary for CVE-2026-15826: registration with a 61+ character username triggers Profile Builder autologin bound to user ID 1. Consumes autologin=true&wpnonce on the module HTTP client only — does not register a KittySploit framework session; use wp-admin separately or export cookies manually...

User Registration CVE-2025-2563 administrator registration

CVE-2025-2563: registers via userregistrationuserformsubmit then userregistrationmembershipregistermember with role=administrator str:...

Broken Link Checker CVE-2026-18937 RCE

Exploits global variable overwrite on plain permalinks classic theme. Requires Broken Link Checker str: base = self.wpnormalizebasepathself.path or "/" if not suffix.startswith"/": suffix = "/" + suffix return f"basesuffix" if base != "/" else suffix def runself: command = quoteself.cmd or...

Supsystic CVE-2026-4257 SSTI RCE

Uses cfsPreFill Twig filter chain to invoke system on firstname. !/usr/bin/env python3 -- coding: utf-8 -- """Supsystic Contact Form CVE-2026-4257 — Twig SSTI via cfsPreFill.""" from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Age Gate CVE-2025-2505 LFI detect

Detects CVE-2025-2505: agegatelang traversal on /?restroute=/age-gate/v3/check includes wp-config.php DBNAME already defined. !/usr/bin/env python3 -- coding: utf-8 -- """Age Gate str: base = self.wpnormalizebasepathself.basepath or "/" return base if suffix == "/" else f"basesuffix" if base != "...