qs_old

QuickSand.io For QuickSand Version 2 written in Python with PDF analysis support, see quicksand.io. QuickSand Version 1 Lite is no longer being actively developed. QuickSand is a compact C framework to analyze suspected malware documents to 1 identify exploits in streams of different encodings, 2...

WordPress RTMKit plugin <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion vulnerability

Authenticated Contributor+ Limited Local File Inclusion vulnerability discovered by wesley wcraft in WordPress Plugin RTMKit versions = 2.0.7...

system_bt_AOSP10_r33_CVE-2021-0507

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

wargame-tarpioka

BubbleTea CVE-2007-4559 Directory traversal vulnerability using .tar to ../../flag path root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Current Building Instructions check docker docker ps docker images docker build...

redeval

RedEval - LLM Safety Evaluation Framework A comprehensive framework for evaluating the safety of Large Language Models LLMs through systematic attack and refusal testing. RedEval provides a unified, secure, and extensible platform for assessing LLM robustness against adversarial prompts and harmf...

jsPDF-Bulk-Detector-CVE-2025-68428-

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 Asset-wide detection tool for identifying jsPDF usage related to CVE-2025-68428. Detection only — no exploitation. 🚨 Background A critical vulnerability was disclosed in the popular JavaScript PDF generation library jsPDF, tracked as CVE-2025-68428...

CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion. To exploit the vulnerability, an authenticated attacker with the role of superadmin can send a specially crafted POST request to the affected endpoint using the url parameter remove to control the file to be...

RRC_steganography

RRC Steganography Rotation Range-Coding RRC Steganography — an efficient and provably secure linguistic steganographic method that embeds secret messages into natural-language text generated by large language models. Paper : Efficient Provably Secure Linguistic Steganography via Range Coding How ...

CVE-2024-38816-PoC

CVE-2024-38816 Proof of Concept PoC This is a proof of concept for the CVE-2024-38816 vulnerability, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image: Spring Boot 3.0.13, based on Spring Framework 6.0.3 root@kitploit: docker build -t cve-2024-38816-poc . 2. Run th...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

netlas-cookbook

Netlas CookBook El objetivo de esta guía es enseñar a cualquier persona interesada en ciberseguridad, independientemente de su nivel de conocimiento, cómo aprovechar al máximo las herramientas de búsqueda de Netlas. Es una lectura extensa. Hemos recopilado la mayor cantidad posible de casos de us...

CVE-2022-46196

CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...

CVE-2024-42327

Write-up CVE-2024-42327 Zabbix Vulnerability Target: 10.129.231.176 Information: I know my target is a Zabbix server. I received a default user account to log into Zabbix: user matthew passwd 96qzn0h2e1k3. This account is a default user, without additional groups or privileges. As usual, we start...

CVE-2026-47668

CVE-2026-47668 Unauthenticated RCE in DBGate = 7.1.8 REF1: https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc REF2: https://github.com/Nxploited/CVE-2026-47668 rce.py Minimal implementation of RCE on /runners/start, Privileged If process can write to ./public/ folder, file...

Arcane

Arcane is a simple script designed to backdoor iOS packages iphone-arm and create the necessary resources for APT repositories. It was created for this publication to help illustrate why Cydia repositories can be dangerous and what post-exploitation attacks are possible from a compromised iOS...

CVE-2026-80169

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

CVE-2026-79966

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

CVE-2022-22733

CVE-2022-22733 CVE-2022-22733 is a vulnerabilit that affects Apache ShardingSphere ElasticJob-UI 3.0.0 and below versions, The vulnerability lead to Privilege Escalation. But, with abusing of the escalated privileges a JDBC Attack it can preformed & achieve RCE. You can read the vulnerability...

CVE-2026-40987

CVE-2026-40987: PoC de Path Traversal en la sincronización remota de archivos de Spring Integration Este repositorio es un PoC mínimo para reproducir CVE-2026-40987, publicado en el aviso de seguridad oficial de Spring. Aviso oficial: https://spring.io/security/cve-2026-40987/ Título oficial:...

IF-Guide

IF-Guide: Influence Function-Guided Detoxification of LLMs NeurIPS 2025 This repository contains the code for IF-Guide, the LLM detoxification technique introduced in our paper: IF-Guide: Influence Function-Guided Detoxification of LLMs Zachary Coalson , Juhan Bae, Nicholas Carlini, Sanghyun Hong...