CVE-2026-61511

cve-id Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso simple Utilice este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de...

AndroidPentest-Framework

AndroidPentest Framework A professional-grade, modular Andr...

Security Bulletin: Multiple vulnerabilities affect IBM Db2 Warehouse container images.

Summary IBM has released the below fix for IBM Db2® on Db2 Warehouse container images in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-35701 DESCRIPTION: Improper...

CVE-2011-2523

CVE-2011-2523 Exploitation 🚀 Usage This poc script allows you to exploit the CVE-2011-2523 VsFTPd 2.3.4 Backdoor Command Execution help ⚒️ Installation root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip install pwntools argpar...

CVE-2026-8461

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-33017

CVE-2026-33017 - Langflow 未授权远程代码执行 ⚠️ 免责声明： 此仓库仅用于授权的安全测试和教育目的。仅在您拥有或已获得明确许可的系统上使用。作者不对该工具的任何滥用或损害负责。 概述 CVE-2026-33017 是 Langflow（一个用于构建 LangChain 应用程序的可视化框架）中的一个未授权远程代码执行漏洞。 POST /api/v1/buildpublictmp/flowid/flow 端点允许在未认证的情况下构建公共流程。当提供可选的 data 参数时，端点会使用攻击者控制的流程数据（节点定义中包含任意 Python...

CVE-2026-27145

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...

Veto v2.3

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

CVE-2026-22557-check

CVE-2026-22557 Vulnerability Assessment Tool Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557 without causing any disruption. See the full write-up at the Bishop Fox blog. Description CVE-2026-22557 is an unauthenticated path-traversal vulnerability in...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

EVTX-ATTACK-SAMPLES

Muestras EVTX de Windows 200 ejemplos de EVTX: Este es un contenedor de muestras de eventos de Windows asociados a técnicas específicas de ataque y post-explotación. Puede ser útil para: Probar tus scripts de detección basados en el análisis de EVTX Entrenar en DFIR y caza de amenazas usando...

cve-2025-0133

CVE-2025-0133 Scanner Palo Alto PAN-OS GlobalProtect Reflected XSS vulnerability scanner. Features Single target & mass scanning Multi-threaded configurable Proxy support Burp, ZAP, etc. Colored output with summary Save vulnerable URLs to file Installation Via pip from GitHub root@kitploit: pip...

CVE-2026-20182

📚 Educational Security Research Repository A repository for learning, testing, and researching cybersecurity concepts in controlled environments. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authoriz...

CVE-2020-7882

CVE-2020-7882 捐赠 通过 PayPal 或扫描下方二维码来支持本项目的维护。 ⚡ 简单用法 请仅在安全且经授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 经授权的渗透测试环境 示例设置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activat...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py A lightweight Python scanner for CVE-2023-48795 — the SSH Terrapin Prefix Truncation vulnerability. Terrapin is a protocol-level vulnerability in SSH that allows an attacker performing an active MitM to truncate the negotiated extension information, downgrading connection securit...

CVE-2026-54420

CVE-2026-54420 LiteSpeed cPanel ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC 一个用于轻松利用 ImageMagick 任意文件读取漏洞 CVE-2022-44268 的 bash 脚本 受影响的 ImageMagick 版本 root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick Studio LLC License: https://imagemagick.org/script/license.php...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for CVE-2025-57819. Unauthenticated error-based SQL injection in FreePBX's endpoint module chains into a root shell via cron job injection and incron privilege escalation. For authorized testing and research only. Do not use against system...

break-golf

break-golf A board for cryptanalysis results that are proved , not run. A challenge fixes two worlds and the statement you must prove. You write an adversary and a proof that it distinguishes them. The win is the proof: nothing is executed, sampled, or replayed, and no human reads the submission ...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 Functional PoC for vulnerability CVE-2024-9796, which affects the WP Advanced Search autocompletion plugin in WordPress, allowing SQL injection through unsanitized GET parameters. 📌 Description This vulnerability allows an attacker to inject arbitrary SQL...