CVE-2025-32433-PoC-Analysis

FAQ - CVE-2025-32433 1. What is Erlang OTP? Erlang is a general-purpose programming language. OTP Open Telecom Platform is a collection of middleware, libraries, and design principles used for fault tolerance using the BEAM VPN. 2. Why is this version of Erlang vulnerable? OTP 26.2.5.10 is...

CVE-2007-2447-Exploitation-SIEM-Detection-Lab

🛡️ CVE-2007-2447 Exploitation & SIEM Detection Lab Wazuh + MITRE ATT&CK B.Tech Project BTP | IIIT Pune Based on: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi A fully functional cybersecurity home lab built on a single machin...

CVE-2024-45519-Zimbra-Real-Fix

CVE-2024-45519-Zimbra-Real-Fix Zimbra CVE-2024-45519 real fix - Official patch is incomplete CVE-2024-45519 - Zimbra Real Fix ⚠️ Warning CVE-2024-45519 is a critical RCE vulnerability CVSS 9.8 in Zimbra Collaboration Suite. Many administrators think they are not protected after applying the...

Exploit for CVE-2026-52618

CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command inject...

Exploit for CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injec...

Exploit for CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: OS command injection via ru...

attackgen v0.16.0

AttackGen AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK and ATLAS frameworks. The tool generates tailored incident response scenarios based on user-selected threat actor groups, AI attack case...

Exploit for Heap-based Buffer Overflow in Microsoft

🛡️ SOC Investigation Report: CVE-2024-49138 Exploitation 📌...

rekono v2.0.0-1

Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in Defect-Dojo if an advanced...

Exploit for CVE-2026-13736

CVE-2026-13736: NewPath WildApricotPress Add-on – Member Direc...

CVE-2016-5195

CVE-2016-5195: Dirty COW Linux Kernel Race Condition Defensive research, non-weaponized validation, and patch analysis for CVE-2016-5195 Dirty COW, a Linux kernel copy-on-write race condition that can allow a local user to modify data associated with a read-only mapping and gain elevated...

CVE-2023-37073

CVE-2023-37073 Las credenciales predeterminadas de Telnet pueden provocar divulgación de información y ataques de denegación de servicio DoS. Pasos para reproducir Esto afecta al AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Divulgación de...

burp-ai-agent v1.0.0

Custom AI Agent The bridge between Burp Suite and modern AI. A note on the name: This extension is published as Custom AI Agent formerly Burp AI Agent. It was renamed to comply with PortSwigger's BApp Store naming requirements and to avoid confusion with Burp Suite's built-in Burp AI provider. Th...

cve-2023-4220-poc

PoC del exploit de Chamilio CVE-2023-4220 Descaradamente copiado de Directamente inspirado en: https://starlabs.sg/advisories/23/23-4220/ Uso: root@kitploit: Chamilio CVE-2023-4220 POC Exploit positional arguments: url The Chamilio Url. e.g. http://example.com options: -h, --help show this help...

DEBIAN-CVE-2026-74712

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0 mlx5core Read of size 272 at addr 0000000176795020 by task...

CVE-2026-74712

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0 mlx5core Read of size 272 at addr 0000000176795020 by task...

DEBIAN-CVE-2026-74702

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

CVE-2026-74702

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

DEBIAN-CVE-2026-74694

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

CVE-2026-74694

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...