copy-fail-cve-2026-31431

CVE Checker for Copy Fail CVE-2026-31431 Authors/Contributors : Patrick Doyle Author/Maintainer, Effie Renard Co-Author, Kimberly-Lee Banks Co-Author, Chris F. Support/Code Review AI Disclosure : Claude Code used for writing tests files, writing test data, and a code security review. All edits we...

[SECURITY] Fedora 44 Update: GitPython-3.1.62-1.fc44

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

CVE-2021-45416

Docker RosarioSIS Installation Minimum requirements: Docker & Git working. You can pull the image from DockerHub or: 1. docker on root@kitploit: $ git clone https://github.com/dnr6419/CVE-2021-45416.git $ cd CVE-2021-45416 $ docker-compose up -d 2. Visit the URL and Install the Database...

CVE-2026-26331

Arbitrary Command Injection via --netrc-cmd in yt-dlp Severity: High CVSS 8.8 Affected Software: yt-dlp = 2023.06.21, Patched In: 2026.02.21 Advisory: GHSA-g3gw-q23r-pgqm CVE: CVE-2026-26331 Summary yt-dlp’s --netrc-cmd command-line option or netrccmd Python API parameter can be abused to achieve...

CVE-2021-32157

CVE-2021-32157 Make it possible to build a vulnerable webmin virtual environment as a container using docker Build If there is an error related to download, please comment on line 15 of dockerfile and run line 14 of dockerfile. root@kitploit: docker build -t VulnWebmin . docker run --name...

dontgo403

dontgo403 es una herramienta para evitar errores 40X. Instalación Obtén la última versión para tu sistema operativo desde RELEASES Desactualizado por ahora O compílalo por tu cuenta RECOMENDADO: root@kitploit: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build...

CVE-2026-30824-Flowise-NVIDIA-NIM-Authentication

CVE-2026-30824 — Flowise NVIDIA NIM Authentication Bypass Checker and Exploit A proof-of-concept checker and exploit for CVE-2026-30824 , a critical authentication bypass vulnerability in Flowise that exposes NVIDIA NIM API endpoints without authentication. Vulnerability Overview CVE-2026-30824 i...

CVE-2021-24307-all-in-one-seo-pack-admin-rce

Admin PHP unserialization RCE in All in one SEO pack CVE-2021-24307 Simple PoC of an admin authenticated RCE in AISEO = 4.1.0.1 provided as an example. Full write-up here: https://darkpills.com/php-unserialize-write-up-with-admin-rce-in-all-in-one-seo-pack-cve-2021-24307/ Usage: root@kitploit: ph...

CVE-2026-23869-Exploit

⚡ CVE-2026-23869 — React2DoS Unauthenticated Remote Denial-of-Service via React Flight Protocol Quadratic CPU Exhaustion in Server Components Map Deserialization Overview • How It Works • Tools • Install • Usage • Nuclei • Fix • Disclaimer Vulnerability Overview Field| Detail ---|--- CVE ID|...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust. Build instructions Install rust if you haven't already root@kitploit: git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release Vuln Check...

cve-2026-40176-cve-2026-40261

CVE-2026-40176 Composer Perforce Repository Remote Code Execution RCE 📋 Summary Command Injection vulnerability in Composer's Perforce repository driver allowing Remote Code Execution RCE through insufficient input validation in repository URL processing. 🎯 Vulnerability Details...

Exploit-CVE-2023-49070-and-CVE-2023-51467-Apache-OFBiz

Exploit CVE-2023-49070 and CVE-2023-51467 Apache OFBiz 18.12.10 Authentication Bypass Vulnerability Apache OFBiz This exploit code has been developed solely for educational purposes and to enhance cybersecurity practices. Any use for illicit purposes is entirely your own responsibility. It is...

tscan

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based scanner for detecting and exploiting the CVE-2026-24061 vulnerability in GNU Inetutils telnetd services. This tool scans IP addresses or networks for vulnerable telnetd services that allow authentication bypass leading to root shell access...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Code Analysis Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection...

cve-2025-54874-poc

Reference https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ Test Env openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux Description the function call chain is: opjreadheader →...

copy-fail-blocker

copy-fail-blocker BPF-LSM mitigation for CVE-2026-31431 "Copy Fail" and the RxRPC variant of Dirty Frag, and for similar privilege-escalation vulnerabilities that depend on userspace access to a kernel-side in-place crypto path reachable via the AFALG or AFRXRPC socket families. A small DaemonSet...

CVE-2023-51073

CVE-2023-51073 - Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03 Christopher J. Pace and Ryan Miller The Buffalo LS210D is a Network Attached Storage NAS server designed and marketed towards small-businesses and individuals. Within the LS210D is the ability t...

CVE-2026-3796

CVE-2026-3796 In QAX Virus Removal version dated 2025-10-22 and earlier, the affected driver QKSecureIOImp.sys rely on caller process's image to determine whether they are allowed to communicate to the mini filter driver. Attackers could impersonate a legitimate caller process image through tacti...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278Nostromo httpd Command Execution ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013...