initroot

Exploiting CVE-2016-10277 More information at: https://alephsecurity.com/2017/06/07/initroot-moto/ If you just want to check if your device is vulnerable, it might be quicker if you just flash stock ramdisk without any modifications. If it's your case, just look for initroot--STOCK.cpio.gz...

mybb-CVE-2022-24734

mybb-CVE-2022-24734 MyBB 1.8.29 - Remote Code Execution root@kitploit: git clone https://github.com/lavclash75/mybb-CVE-2022-24734.git cd "mybb-CVE-2022-24734" docker-compose down docker system prune -a docker rm -f $docker ps -a -q docker volume rm $docker volume ls -q docker-compose up -d...

mi-laboratorio-log4shell

🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An automated, single-command security research laboratory designed to demonstrate and audit the Log4Shell CVE-2021-44228 Remote Code Execution RCE vulnerability. This project consolidates all necessary components vulnerable application, malicio...

Codify-TJNULL-OSCP-

Hack The Box — Writeup de Codify Guía completa de pruebas de penetración y writeup para la máquina Codify en Hack The Box. 📌 Información de la Máquina Campo| Valor ---|--- Nombre| Codify SO| Linux Dificultad| Fácil Conceptos Clave| vm2 RCE CVE-2023-30547, Enumeración de BD SQLite, Cracking de...

cve-2022-36804

CVE-2022-36804 Bitbucket PoC This repository contains a Python exploit script for Atlassian Bitbucket Server/Data Center vulnerability CVE-2022-36804. The issue is a command-injection flaw in the Git archive flow, where crafted prefix parameters can be interpreted by the server and executed as...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

POC-CVE-2026-18963

CVE-2026-18963 — Keycloak 忘记密码流程认证绕过 PoC 针对 CVE-2026-18963 的概念验证，该漏洞存在于 Keycloak 的“忘记密码”/凭据选择流程中，攻击者可借此到达 UPDATEPASSWORD 步骤——并重置目标账户的密码——而无需正确完成所需的身份验证（例如，无需有效的 OTP/第二因素）。 该脚本完全通过 HTTP 驱动整个流程（无需浏览器/Selenium），具体步骤如下： 1. 加载领域的登录页面并定位“忘记密码”链接。 2. 打开重置凭据页面并触发 tryAnotherWay。 3. 在生成的凭据选择器中提交用户名。 4. 提取并...

cve-2026-75650-magento-validation-lab

CVE-2026-75650 / VULN-39341 Docker 验证实验室 本独立实验室在固定修订版本的 Magento Open Source 2.4.9 结账环境中复现 StyleSmuggler 组件级 PHP 执行原语 ，然后证明 Adobe 的 VULN-39341 补丁能够阻止相同的输入。 该验证是非破坏性的：包含的 PHP 只能在 /tmp 中写入一个随机标记。它无法运行命令、下载文件、打开回调或接受操作员提供的载荷。 范围与声明 该实验室提供： 一个固定到 Git 修订版本 755e34dd689021c5165db9d35ecff74f7dc51527 的标准...

CVE-2026-10795

CVE-2026-10795 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 每次捐赠的百分之十将捐献给金边甘塔博帕儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： root@kitploit: bash 此命令需要 Bash 和...

CVE-2026-83548-CVE-2026-83549

CVE-2026-83548、CVE-2026-83549 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 您每笔捐赠的百分之十将捐献给甘塔博帕儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： root@kitploit: bash 此命令需要 Bash 和...

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root

Summary nltk.corpus.reader.api.CorpusReader.open can be used to read files outside the intended corpus root via a symlink placed inside that root. Although NLTK blocks absolute paths and .. traversal, the current boundary check is only lexical and does not account for symlink resolution. This lea...

GHSA-R6GQ-WHWQ-MVG9 NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root

Summary nltk.corpus.reader.api.CorpusReader.open can be used to read files outside the intended corpus root via a symlink placed inside that root. Although NLTK blocks absolute paths and .. traversal, the current boundary check is only lexical and does not account for symlink resolution. This lea...

CVE-2022-4140

CVE-2022-4140 - WordPress 插件 Welcart e-Commerce -f --disable-version-check python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd 示例 root@kitploit: └─$ python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd 正在检查目标是否存在漏洞 + 检测到插件版本：2.8.4 + 目标存在漏洞 正在尝试读取任意文件...

stylesmuggler-adobe-patches-mageos

disrex/stylesmuggler-adobe-patches-mageos 通过 composer require 交付 Adobe 官方 APSB26-146 修复 （CVE-2026-75650，内部 参考编号 VULN-39341），适用于 Mage-OS 商店，通过 cweagans/composer-patches 应用。 这是 disrex/stylesmuggler-adobe-patches 的 Mage-OS 配套包（后者适用于 Magento Open Source）。请仅在 Mage-OS 上使用本包。 优先选择包含该修复的 Mage-OS 版本。...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...

SkillSpector v2.11.1

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

CVE-2026-46300

CVE-KERNEL · Linux Kernel LPE Chain Multi-CVE Local Privilege Escalation chain for Linux kernel vulnerabilities uid=1000 → root via xfrm-ESP, RxRPC, or Fragnesia page-cache write Overview CVE-KERNEL is a Python-based Local Privilege Escalation LPE tool that chains multiple Linux kernel CVEs to...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.5.19 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 have been addressed in version 11.3.1.2-IF2 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.43 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...