CVE-2025-29927

CVE-2025-29927 – Next.js Middleware Authorization Bypass This repository contains a functional exploit for CVE-2025-29927, a critical authorization bypass vulnerability in Next.js. The flaw allows attackers to bypass middleware-based authentication and authorization checks, granting unauthorized...

MinimalReproducer

After significant efforts, stripped it down to a minimal replicator. This is just an empty project to demonstrate the issue with dependency-check-maven usage I am forced on doing by my company rules. Do check the pom.xml and do verify: mvn org.owasp:dependency-check-maven:RELEASE:aggregate Or if...

CVE-2025-45467

CVE-2025-45467: Insecure Firmware Verification in Unitree Go1 Summary A critical vulnerability CVE-2025-45467 has been discovered in Unitree Go1 robotic dog all firmware versions ≤ Go120220511, where the firmware update mechanism relies solely on insecure MD5 hash checks for integrity verificatio...

apache__camel_CVE-2018-8041_2-20-3

Apache Camel Apache Camel is an Open Source integration framework that empowers you to quickly and easily integrate various systems consuming or producing data. Introduction Camel empowers you to define routing and mediation rules in a variety of domain-specific languages DSL, such as Java, XML,...

lighty-sqlinj-demo

title: Ep4 - Network-Related Vulnerability members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Related vulnerability: root@kitploit: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirm:...

cve-2022-42889-intercept

cve-2022-42889-intercept For versions below Java 11, special attention is required, as higher versions have already removed the Javascript interpreter. This solution targets Java 8. Intercept illegal parameters via JVM startup parameters and jps pid. quick start root@kitploit:...

filekey

🔐 FileKey FileKey is an offline web app that lets you quickly encrypt and share files using passkeys. No accounts, no tracking, no cloud. 🛡️ FileKey is free, open source, and privacy-first. Live at filekey.app. 🚀 Features ✅ Free & Open Source – Licensed under GPLv3. ✅ Accountless – No logins, no...

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

Kubernetes Java Client Java client for the kubernetes API. Client versioning The Java client uses Semantic Versioning. We increment the major version number whenever we regenerate the client for a new Kubernetes release version see table below. Whenever we do this there are new APIs added and...

iqoo-temp-root

vivo/iQOO Temporary Root Toolkit No bootloader unlocking, no flashing needed, temporary root lost on reboot. Core principle: CVE-2026-43499 futex PI UAF kernel exploit + temporary KernelSU loading. Supported devices App version Device| Codename| Payload ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t...

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new report published by researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx. On May 12, Maciej Mensfeld, senior product manager for software supply chain security at...

cve-2020-0688

cve-2020-0688 cve-2020-0688 Login with a user with an email address privliage is nothing to worry about. Grab - VIEWSTATEGENERATOR from page source Grab - the value of ASP.NETSessionId cookie for viewstateuserkey value Download YSO Here root@kitploit: ysoserial.exe -p ViewState -g...

CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

CVE-2024-6366

Para crear un módulo de Metasploit para explotar la vulnerabilidad RCE en el plugin User Profile Builder de WordPress anterior a la versión 3.11.8, necesitamos aprovechar la falta de autorización adecuada en la funcionalidad de carga de archivos multimedia. Así es como puedes crear dicho módulo d...

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that...

rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

CVE-2026-16482

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and including, 4.7.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

citrix_dir_traversal_rce

citrixdirtraversalrce Se descubrió un salto de directorio en Citrix Application Delivery Controller ADC, también conocido como NetScaler, y en Gateway 10.5, 11.1, 12.0, 12.1 y 13.0. Cuando NSPPE recibe una solicitud para GET /vpn/index.html, se supone que debe enviar esta solicitud a Apache, que ...

voidsec-proxy

voidsec-proxy root@kitploit: ██╗ ██╗ ██████╗ ██╗██████╗ ███████╗███████╗ ██████╗ ██║ ██║██╔═══██╗██║██╔══██╗██╔════╝██╔════╝██╔════╝ ██║ ██║██║ ██║██║██║ ██║███████╗█████╗ ██║ ╚██╗ ██╔╝██║ ██║██║██║ ██║╚════██║██╔══╝ ██║ ╚████╔╝ ╚██████╔╝██║██████╔╝███████║███████╗╚██████╗ ╚═══╝ ╚═════╝ ╚═╝╚═════...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Pending: Path Traversal in Flask-Uploads Vulnerability Information Product : Flask-Uploads Version : 0.2.1 and potentially older versions Vulnerability Type : Path Traversal Directory Traversal CWE-ID : CWE-22 Severity : HIGH CVSS 7.5 Impact : Arbitrary File Write, Remote Code...

CVE-2020-28874

This repository contains the description of the vulnerability found CVE-2020-28874 in ProjectSend r1270 release. Thank you to my colleagues from Entelgy Innotec Security for pushing me to improve! CVE-2020-28874: Privilege Escalation Description The vulnerability is in the reset password componen...