CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter

CVE-2026-85046 + CVE-2026-87491 Was doing a ton of reading over at https://github.com/Serotav/Writeups. Decided to combine 85046 with 87491 and bake in some WASM at the same time. Went and re-did a stage1.js for an eventual ubuntu LPE I'm cooking. The basics: Confuse packed object and integer...

CVE-2024-6387_Check

This script checks if servers are running a vulnerable version of OpenSSH based on specified targets. It uses threading for concurrent scanning of multiple targets and ports. Installation: git clone https://github.com/sardine-web/CVE-2024-6387Check.git cd CVE-2024-6387Check Usage To check if...

CVE-2020-5902-Vuln-Checker

CVE-2020-5902 Vulnerability Checker While looking at the vulnerabilty with fellow researchers we came to the idea that most of the current ways in which to test for the vulnerability can be classed as a form of compromise of the system. We wanted to develop a way in which to test the vulnerabilit...

CVE-2021-26086

CVE-2021-26084 root@kitploit: this is a script written in golang to exploit Confluence OGNL Injection CVE-2021-26084. root@kitploit: git clone https://github.com/march0s1as/CVE-2021-26084/ cd CVE-2021-26084 go get -v github.com/fatih/color go build post.go ./post.go -h...

CVE-2019-12185

CVE-2019-12185 eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability Installation Instruction: Download using git Requires git: git clone https://github.com/7heKnight/CVE-2020-0688 Download Zip File: https://github.com/7heKnight/CVE-2020-0688/archive/refs/heads/main.z...

PwnKit_CVE-2021-4034

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. root@kitploit: sh -c "$curl -fsSL...

challenge-cve-2024-3552

challenge-cve-2024-3552 run command to start challenge: docker-compose up then access: http://localhost:8080 active plugin web directory free :D And start exploit...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

CVE-2023-24044

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2023-24044 Run bellow command to check CVE-2023-24044 -h Configurations 2. We integrated with the Telegram A...

CVE-2023-39593

MariaDB 10.5 Authenticated Code execution-sysexec This guide provides detailed instructions to exploit a User-Defined Function UDF vulnerability in MariaDB on a remote server. These steps include downloading and executing malicious code on a vulnerable database system. Warning: This document is f...

Cartero

Cartero URL http://section9labs.github.io/Cartero/ Description A robust Phishing Framework with a full featured CLI interface. The project was born out necessity through of years of engagements with tools that just didn't do the job. Even though there are many projects out there, we were not able...

CVE-2025-46157

CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Remote Code Execution and Privilege Escalation Summary A critical vulnerability was discovered in Timetrax V1 2025 that allows authenticated users to bypass file upload restrictions and achieve remote code execution RCE. The issue exists in the Lea...

go-get-rce

This repository does not have a README...

CVE-2025-5548

Exploitation and Vulnerability Analysis Document purpose: Reflect on the knowledge acquired during the lab deployment, detail the exploitation process for CVE-2025-5548, and outline the next steps toward unknown vulnerability 0-day research. 1. My Vision on Vulnerability Research Throughout this...

CVE-2025-29556

CVE-2025-29556 – ExaGrid Security Officer Account Creation Bypass 📝 Overview Vulnerability Title : Unauthorized Creation of Security Officer Account Product : ExaGrid EX10 Backup Appliance Version Affected : Tested on current version at disclosure Versions Affected : 6.3 – 7.0.1.P08 CVE ID :...

cve-2025-29927-lab

This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...

metasploit-pentest-report

Authorized Penetration Test — Metasploit Lab Scope and Authorization All targets used in this project are explicitly authorized: Target| IP| Authorization Basis ---|---|--- Metasploitable2| 192.168.3.130| Self-hosted VM on isolated host-only network. Intentionally vulnerable by design — created...

gogs

👉 Deploy on DigitalOcean and get $200 in free credits! 🔮 Vision The Gogs /gɑgz/ project aims to build a simple, stable and extensible self-hosted Git service that can be set up in the most painless way. With Go, this can be done with an independent binary distribution across all platforms that Go...

CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...