CVE-2026-30332

CVE-2026-30332 Description A Time-of-Check to Time-of-Use TOCTOU vulnerability was identified in Balena Etcher for Windows in versions prior to 2.1.4. The application creates a temporary .cmd file in a user writable directory and later executes it with elevated privileges via UAC. This allows an...

docker-socket-risk-demos

docker-socket-risk-demos Companion repo for the video: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI This repo contains the sample web app and Claude Code prompt used in the video to demonstrate: 1. W...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation CVE-2025-21298 delivered via a malicious RTF attachment. Investigation of the alert from LetsDefend On 4 February...

CVE-2026-31431

CopyFail CVE-2026-31431 implemented in Go, Have fun...

cpsniper

cPanelSniper CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain · Interactive WHM Shell · TRUE STABLE for 10M+ targets · Zero memory usage · stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical...

CVE-2025-32463

CVE-2025-32463 - Sudo Privilege Escalation PoC /////// Disclaimer ///////////////////////////////////////////////////////////////////////////////////////////////////////////////// This project is provided solely for educational purposes. By using any part of this repository, you acknowledge that...

log4j-polkit-poc

log4j CVE-2021-44228 + polkit CVE-2021-4034 Vulnerable instance for the log4j apache exploit and privilege escalation using polkit The vulnable spring-boot-application.jar was extracted from this docker image The malicious JNDI server was downloaded from here and referenced in this article. PoC...

CVE-2026-1529

CVE-2026-1529 Keycloak Exploit Tool CVE-2026-1529 : Keycloak - Unauthorized organization registration via improper invitation token validation ⚠️ WARNING : This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. 📋 Table of...

cve-2021-43858

CVE-2021-43858 exploit MinIO user privilege escalation vulnerability exploit Run: go run exp.go...

Simple-CTF-Writeup

Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection CVE-2019-9053, credential recovery, SSH access, privilege escalation via Vim, and root compromise. TryHackMe - Simple CTF Writeup A complete walkthrough of the Simple CTF room on...

Terrminus-CVE-2026-2406

Terminus - CVE-2026-24061 Scanner & Exploitation Framework A security analysis engine for CVE-2026-24061 Telnet NEWENVIRON authentication bypass and privilege escalation vulnerability. Overview Terminus is a professional security research tool designed for authorized penetration testing and...

pii-shield v2.2.3

PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. "Don't let PII poison your AI models."...

CVE-2023-32315-Openfire-Bypass

CVE-2023-32315 0x01 Obtain the returned JSESSIONID and csrftoken, construct a request packet to add a user replace JSESSIONID, csrftoken root@kitploit: cd CVE-2023-32315-Openfire-Bypass/scanall go mod tidy go run main.go -u http://openfire.com:9090 0x02 Plugin compilation and installation...

cve_2026_34621_advanced

CVE-2026-34621 Advanced Exploit Generator A sophisticated, cross-platform exploit generator for CVE-2026-34621 – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code execution on Windows and macOS. ⚠️ IMPORTANT DISCLAIMER This too...

copy-fail-go

Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: This program is highly dangerous and experimental. Manual cleanup is required to clear the exploit. Use at your own risk! Technical Writeup original repo run check /usr/bin/su before run: root@kitploit: user@pc:$ hexdump -n 300 -x /usr/bin/su...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images a...

RLSA-2026:65895 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: crypto/x50...

CVE-2026-5173

🦊 CVE-2026-5173: GitLab WebSocket Unauthorized Method Execution PoC 🛠️ Overview CVE-2026-5173 allows a low-privileged authenticated attacker to call restricted backend methods through GitLab's WebSocket /-/cable endpoint, specifically via the GraphqlChannel. This can lead to sensitive data exposur...

RLSA-2026:65886 Important: image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/x509: crypto/tls: golang: Go: Denial of...

image-builder security update

An update is available for image-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images a...