CVE-2026-89083

HP Advance software contains potential vulnerabilities that may enable elevation of privilege , remote code execution , or arbitrary file write under certain conditions, affecting the HP Advance server hosting the software. The CVSS 4.0 score is 9.3 (CRITICAL) , with a network attack vector requi...

EUVD-2026-81090

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: root@kitploit:...

EventViewerUAC_BOF

EventViewerUACBOF This is a Beacon Object File implementation of the Event Viewer deserialization UAC bypass discovered by @orange8361 and the POC put together by CsEnox. Tested on x64 Win10/Win11 OPSEC WARNINGS! This UAC bypass performs the following actions which should be considered in referen...

age

-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. root@kitploit: $ age-keygen -o key.txt Public key:...

EUVD-2026-81089

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-89082

CVE-2026-89082 affects HP Advance software running on the HP Advance server, with potential vulnerabilities enabling elevation of privilege , remote code execution , or arbitrary file write under certain conditions. The assigned CVSS 4.0 base score is 9.3 (CRITICAL) , with a network attack vector...

CVE-2024-33113

CVE-2024-33113 El router D-LINK DIR-845L es vulnerable a una divulgación de información a través del archivo bscsmsinbox.php. La CVE-2024-33113 es una vulnerabilidad en el router D-LINK DIR-845L que permite una divulgación de información mediante el archivo bscsmsinbox.php. La vulnerabilidad se...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had. I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login. After an unholy amount of time I finally figured out...

CVE-2025-24054_CVE-2025-24071-PoC

CVE-2025-24054 和 CVE-2025-24071 - 通过 .library-ms 利用的 NTLM 哈希泄漏 本 PoC 演示了在未打补丁的 Windows 系统（2025 年 3 月星期二补丁）上通过 .library-ms 文件利用 NTLM 哈希泄漏。 ⚠️ 仅用于教育和研究目的。请勿在生产环境或未经授权的系统上使用。 🧠 描述 当在 Windows 资源管理器中打开（或预览）包含 UNC 路径的 .library-ms 文件时，会触发向指定服务器发送 SMB 身份验证请求，从而泄漏 NTLMv2 哈希。 📁 文件 generatelibraryms.py：生成恶意的...

CVE-2020-9380

PoC IPTV Smarters 漏洞利用 使用方法 python gld.py -u http://www.pirate-ilegal-tv.com/ -i 漏洞 文件 includes/ajax-control.php： root@kitploit: ?php / @ PHP 5.6 @ Decoder version : 1.0.0.1 @ Release on : 24.03.2018 @ Website : http://EasyToYou.eu / sessionstart; if fileexists"functions.php" includeonce...

DotGit

DotGit An extension for checking if .git is exposed in visited websites Features Check if a .git/.svn/.hg folder exists for each site you visit Check if a .env file exists for each site you visit Check if a .DSStore file exists for each site you visit Check if the site is open source github/gitla...

RevCAT

RevCAT OpenCATS 注意： 必须指向 OpenCATS 安装的根路径。 截图...

cve-2020-5902

cve-2020-5902 cve-2020-5902 POC 利用 root@kitploit: POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specif...

CVE-2022-30190

CVE-2022-30190 用法（仅限 Windows） 创建 docx 文件：$ PoC.py docx your-host-ip 直接运行服务器：$ PoC.py host...

CVE-2024-34471

CVE-2024-34471 描述： 经过身份验证的用户可以利用mliRealtimeEmails.php文件中的路径遍历漏洞（如果具有写入权限，可导致文件删除）。导出HTML功能中的filename参数未正确验证文件位置，允许攻击者读取并删除服务器上的任意文件。当mliRealtimeEmails.php文件本身被读取并随后删除时，观察到该漏洞，导致文件返回404错误并中断邮件信息加载。 版本： 发现于HSC Mailinspector 5.2.17-3，但适用于至5.2.18的所有版本。 概念验证...

CVE-2025-48384

CVE-2025-48384 This is a readme file...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Unauthenticated Arbitrary File Upload Description The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the...

hcxtools

hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...