CVE-2024-21626-runcPOC

Vulnerability Reproduction CVE-2024-21626 docker runc Escape Vulnerability 1. Vulnerability Overview Vulnerability Name| docker runc Escape Vulnerability ---|--- CVE ID| CVE-2024-21626 Disclosure Date| 2024-01-31 Characteristic| / Affected Versions| runc @ v1.0.0-rc93, 1.1.11 2. Exploitation &...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

BootHoleFix

Boot Hole Fix Este script corregirá el error BootHole identificado en CVE-2020-25632 y/o CVE-2021-20233. El 29 de julio de 2020, Microsoft publicó el aviso de seguridad 200011 que describe una nueva vulnerabilidad relacionada con Secure Boot. Los dispositivos que confían en la Autoridad de...

CVE-2021-45041

CVE-2021-45041 PoC for CVE-2021-45041 aka SCRMBT-177 - Authenticated SQL-Injection in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45041 Example usage: root@kitploit: .venv ➜ CVE-2021-45041 git:main ✗ ./exploit.py --host...

CVE-2018-10933

This tool provides the ability to scan and exploit server running vulnerable versions of libssh. vulnerability: https://www.libssh.org/security/advisories/CVE-2018-10933.txt fix: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/ this tool is meant to be used on...

CVE-2016-3714.ansible.role

Ansible Role: CVE-2016-3714 Fix ImageMagick Command Injection CVE-2016-3714 security issue with Ansible. Requirements Any installed imagemagick and before v6.7.7.10 machine. Role Variables A description of the settable variables for this role should go here, including any variables that are in...

CVE-2025-26318

TSplus Remote Access - CVE-2025-26318 Insecure Permissions Information Disclosure 📌 Description TSplus is, by default, vulnerable to the disclosure of information from users currently connected to the domain on TSplus. 🔍 Vulnerability Details CVE ID : CVE-2025-26318 Vendor : TSplus Affected...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

CVE-2025-68116

CVE-2025-68116 Author: @x0root Vulnerability: Stored Cross-Site Scripting XSS via Browser-Renderable Uploads SVG / HTML Affected Software: FileRise Note: GHSA-qrcv-vjvf-fr29 introduced a mitigation that prevented SVGs from rendering inside the FileRise web UI preview pane. This report documents a...

rdpscan-BlueKeep

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are expect a worm soon like WannaCry and notPetya...

cve-2021-33909

Kernel runtime fix of CVE-2021-33909 This repository builds an out-of-tree module named "cve-2021-33909.ko". cve-2021-33909 fixes an issue in the kernels filesystem layer by kprobe-replacing vulnerable functions during runtime. It can be build via "make", setting KDIR to the kernels...

CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Autorización faltante para actualización de opciones arbitrarias Suscriptor+ Descripción: El plugin WooODT Lite para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidades en la función...

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

Credenciales Hardcodeadas de mySCADA myPRO 7 CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt root@kitploit: Changelog v7.0.46 ----------------- - fix of possible vulnerability as...

reinschauer

Reinschauer A PoC to remotely control Windows machines over Websockets. Check out my blog for a writeup. Can be executed as Go exe, .NET/C exe and in-memory using BOF.NET and Cobaltstrike. Traffic can be tunneled via an interactive Beacon connection. Other than most HVNC implementations,...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

CVE-2026-2035703-x300

CVE-2026-2035703: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Under coordinated disclosure 90-day embargo Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-2035703 Severity: Critical CVSS 9.8 CWE: CWE-78 OS Command...

log4j

Log4J Zero-Day Compilation of log4j OSINT findings, including Detection, Attack Surface, Mitigation, IoCs. I. Overview Summary This vulnerability makes it possible for any attacker who can inject text into log messages or log message parameters into server logs to load code from a remote server...

CVE-2022-40317

CVE-2022-40317 XSS almacenado en Notas Se encontró un XSS almacenado en la sección de notas de la aplicación mientras pentesteábamos un cliente que usaba OpenKM. Básicamente, al almacenar notas, de alguna manera se permitía HTML normal y se renderizaba tal cual. Como saben, las etiquetas Sin...

LHF

Codacy Badge This has been only tested on the newest Kali Linux Distro LHF: Low Hanging Fruit a recon tool for penetration testing To install dependencies: ./Install.sh To start: ./LHF.py root@kitploit: + Checking permissions - Rockyou wordlist is missing trying to decompress... + Rockyou wordlis...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Buffer Overflow Discoverer : Golden Ticket Labs Vendor : Particle Date Assigned : August 12th 2025 MITRE Description A buffer overflow in the blecontrolrequestchannel.cpp component of Particle Device OS v5.6.0 enables arbitrary function pointer overwrite du...