cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

openqore

openqore an open-source toolkit to patch, modify, and enhance the firmware of soundcore q-series headphones, with future support for other models planned. note: this project is my personal journey into the world of hardware reverse-engineering and embedded systems. it was created by a teenager an...

dot

the Deepfake Offensive Toolkit dot aka Deepfake Offensive Toolkit makes real-time, controllable deepfakes ready for virtual cameras injection. dot is created for performing penetration testing against e.g. identity verification and video conferencing systems, for the use by security analysts, Red...

CVE-2026-65694-PoC

CVE-2026-65694 — Microweber CMS Unauthenticated Arbitrary File Read Proof-of-concept for CVE-2026-65694 , an unauthenticated path-traversal → arbitrary file read in Microweber CMS. An unauthenticated attacker can read any file the web-server user can access — the Laravel .env APPKEY, DB...

VolWeb

Introduction VolWeb is a digital forensic memory analysis platform that leverages the power of the Volatility 3 framework. It is dedicated to aiding in investigations and incident responses. 🧬 Objectives The goal of VolWeb is to enhance the efficiency of memory collection and forensic analysis by...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940: cPanel/WHM Authentication Bypass Analysis Vulnerability Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM affecting all currently supported versions. It allows an unauthenticated attacker to bypass authentication and gain root-level access W...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

This script targets the Nexus Repository Manager 3 EL injection vulnerability CVE-2018-16621, and performs one-click exploitation to get a reverse shell. Running Example: Run the script on the attacker machine, enter the target IP, port, local listener IP and port as prompted, then execute the...

usn_analytics

USN Analytics Build root@kitploit: git clone https://github.com/4n6ist/usnanalytics.git Linux root@kitploit: sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make Window...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

RDWAtool

A python all-in-one tool to extract information, spray and bruteforce passwords on a Microsoft Remote Desktop Web Access RDWA application. This python tool allows to extract various information from a Microsoft Remote Desktop Web Access RDWA application, such as the FQDN of the remote server, the...

CVE-Factory

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability CVE-Factory is a Multi-Agent system for fully automated, end-to-end CVE reproduction. Given CVE records, the system automatically researches details, generates test cases, builds Docker environments, and validates tha...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink control href attribute escape vulnerability CVE-2022-44666 0day. This is the story about another forgotten 0day fully disclosed more than 4 years ago by John Page aka hyp3rlinx. To understand the report, you have to consider i'm stupid :- And my...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation As a security...

CVE-2022-32532

CVE-2022-32532 about This is a demo project, which only shows one of the conditions for exploiting this vulnerability CVE-2022-32532. In fact, there are more ways to exploit it, as long as developers use RegExPatternMatcher, there will be a possible bypass vulnerability. introduce Token request...

CVE-2022-0848-RCE

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Change the host in bash file and run, then get the shell through RCE...

CVE-2023-4220-Proof-of-concept

CVE-2023-4220-Proof-of-concept Chamilo LMS Unauthenticated Big Upload File that allows remote code execution CODE IS MADE AND USED FOR HACKTHEBOX CTF PERMX Unauthenticated file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS the php...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...

CVE-2023-32961

CVE-2023-32961 This repository is about XSS vulnerability in Wordpress Zotpress Plugin. Component details Component name Zotpress Vulnerable version ≤ 7.3.3 Component slug zotpress Component link https://wordpress.org/plugins/zotpress/ Pre-requisite Unauthenticated Vulenerability details Short...

CitrixNetscalerAnalysis

Citrix Analysis Notebook A jupyter notebook to aid in automating some of the forensic analysis related to Citrix Netscaler hosts compromised via CVE-2019-19781. For help retrieving artifacts to examine see this Citrix triage script. All notes/suggestions are welcome. Feel free to submit pull...