309004 matches found
CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide δΈζ π Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image...
cve-2025-7771
CVE-2025-7771 β ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control β any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...
glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router
GL.iNet Beryl AX Triple RCE PoC PoC for three unauthenticated command injection vulnerabilities CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 in the GL.iNet GL-MT3000 Beryl AX travel router firmware = 4.4.5. Full writeup:...
CVE-2025-2304-CamaleonCMS-PoC
PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Technical Overview This repository contains a Functional Proof of Concept PoC for a Mass Assignment vulnerability in Camaleon CMS versions prior to 2.8.1. The vulnerability resides in the updatedajax endpoint of the User Management module,...
CVE-2026-82222
CVE-2026-82222 β GiveWP Author: Rx019 CVSS: 10.0 Critical Type: Unauthenticated PHP Object Injection β Remote Code Execution Plugin: GiveWP give β Donation Plugin and Fundraising Platform Affected: Patched: 4.16.8 Description GiveWP stores a donor's lastname in the PHP session without sanitizatio...
Onapsis_CVE-2025-31324_Scanner_Tools
Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...
zend-crypt
zend-crypt Repository abandoned 2019-12-31 This repository has moved to laminas/laminas-crypt. Zend\Crypt provides support of some cryptographic tools. Some of the available features are: encrypt-then-authenticate using symmetric ciphers the authentication step is provided using HMAC;...
censys-enumeration
Censys Enumeration A script to extract subdomains/emails for a given domain using SSL/TLS certificates dataset on Censys The output is in JSON format Demo Screenshots Non verbose mode Verbose mode Sample JSON output 3rd party package dependency censys click Setup Clone this repo root@kitploit: $...
Antiphishing v35456910988
Antiphishing β Predictive Phishing Intelligence for Suricata DONATE Β· DASHBOARD VECTORS Β· CONTRIBUTING Β· SUBMIT A VECTOR Β· REST API CTI Β· WIKI Predictive Phishing Intelligence for Suricata β Preemptive Defense from Day Zero Antiphishing is an open-source GPLv3 Cyber Threat Intelligence CTI...
birdy-edwards
BIRDY-EDWARDS 2.0 Infiltrate & Expose Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama. AI-powered Facebook SOCMINT platform β 100% local, zero cloud dependency. For lite version check this repo click...
CVE-2026-34197
CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code βCode Injectionβ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...
CVE-2025-55887
CVE-2025-55887 Description Cross-Site Scripting XSS vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject...
poc-CVE-2019-9053
PoC CVE-2019-9053 - CMS Made Simple SQL Injection Educational PoC in Python 3 for CVE-2019-9053, a time-based blind SQL Injection vulnerability in CMS Made Simple = 2.2.9. This version has been modified for use in CTF/lab environments. It includes pre-configured prefixes to reduce extraction time...
CVE-2025-6218-WinRAR-RCE-POC
CVE-2025-6218: WinRAR Path Traversal RCE β οΈ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 is a critical path traversal vulnerability in WinRAR that allows arbitrary code execution. Currently exploited by APT groups such as GOFFEE, Bitter APT-C-08 and Gamaredon. π Index...
CVE-2026-53534
JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...
UBUNTU-CVE-2026-82560
Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...
Releasing Spring for Modern Challenges
Releasing Spring For Modern Challenges TL;DR: The Spring release train has been updated from a two week long train to a single day, the Thursday after the third Monday of the month. The next regular patch train will be on October 22nd. A milestone only train will occur on September 24th. Back in...
When the Directory Becomes the Weapon: Understanding NTDS.dit Theft
When the Directory Becomes the Weapon: Understanding NTDS.dit Theft By Maulik Maheta and Henry Bernabe Β· September 21, 2026 Executive Summary While adversaries continually update their attack tools, their fundamental techniques, such as extracting credentials from Active Directory's NTDS.dit and...
UBUNTU-CVE-2026-53534
JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...
CVE-2026-93565
A flaw was found in Netty RtspDecoder. The RtspMethods.valueOf function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol RTSP requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. Th...