cve-2026-40072-ssrf-lab

CVE-2026-40072 SSRF Lab Hands-on local lab to demonstrate CVE-2026-40072 in web3.py, show the SSRF impact in Burp Suite, and verify the official fix. Overview This repository contains a safe, local-only proof of concept for CVE-2026-40072, a Server-Side Request Forgery SSRF issue tied to CCIP Rea...

CVE-2026-32646

CVE-2026-32646: Missing Authentication on Administrative Device Management Endpoint Advisory Field| Value ---|--- CVE| CVE-2026-32646 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 7.5 High Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE| CWE-306 Missing Authentication for Critical Function...

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a...

CVE-2026-46394-haxcms-git-command-injection

CVE-2026-46394 - HAXcms Git.php OS Command Injection CWE-78 Proof-of-concept for authorized security testing and research only. The vulnerability described here is fixed in the latest release of HAXcms. This PoC is published so that defenders and researchers can verify the issue on unpatched...

drupalgeddon2-cli

drupalgeddon2-cli A command-line rewrite of the Drupalgeddon2 CVE-2018-7600 proof-of-concept, built as a study exercise while working through the Hack The Box Academy Attacking Common Applications module. !WARNING For authorised security testing and education only. Running this against systems yo...

CVE-2024-4367-PDF.js-xss

CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss Download the environment, unzip it, and enter root@kitploit: unzip cve-2024-4367-lab cd cve-2024-4367-lab Environment startup command root@kitploit: mkdir upload chmod 777 upload docker-compose up -d...

CVE-2026-48907

CVE-2026-48907 TODO تهيئة CVE خاص ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في بيئات آمنة ومرخّص بها، مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات المختبرات المعزولة بيئات اختبار الاختراق المرخّصة مثال على الإعداد: root@kitploit: git clone cd Project use python follow below Create a...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner A Python-based scanner and validation tool for identifying potentially vulnerable Cisco Unified Communications Manager Unified CM deployments affected by CVE-2026-20230. Features Detects Cisco Unified CM instances Checks WebDialer exposure Supports single-target and bulk...

CVE-2026-5426

CVE-2026-5426 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Test a single target fo...

React2Shell

React2Shell CVE-2025-55182 Overview This repository is my research on CVE-2025-55182, also referred to as React2Shell vulnerability. Repo consists of two main part: stand and exploit. References Some info about this security flaw: NIST HackerOne article Summary by Vercel Article by WIZ Author...

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution RCE and gain practical experience in exploitatio...

SecFlow

SecFlow Fully Automated Multi-Vector Threat Analysis Pipeline Drop in any file, URL, IP, domain, or image. SecFlow routes it through specialized analyzers, reasons about findings with AI, and produces a professional security report with YARA rules, SIGMA rules, and exportable PDF — automatically...

Vulnerability-CVE-2025-64446-CVE-2025-58034

FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 Unauthenticated RCE MCP stdio env-var injection Unauthenticated remote code execution in Langflow OSS through 1.10.1. The environment-variable blocklist that guards MCP stdio server configuration DANGEROUSENVVARS omits SHELLOPTS, BASHOPTS and PS4. Because th...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt vulnerability reproduction environment This repository is a snapshot of the reproducible vulnerability environment for CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exported from the corresponding container image yan5ui/cve-2021-3975:tier1...

DevHub-HTB-Walkthrough

DevHub – HTB Walkthrough Medium Linux Machine: DevHub Difficulty: Medium OS: Linux Topics: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root Privilege Escalation 📌 1. Reconnaissance root@kitploit: nmap -sC -sV devhub.htb Result: root@kitploit: Port 22 SSH Port 80 HTTP Port 6274 MCPJam...

CVE-2025-31324

CVE-2025-31324 How does this detection method work? The template performs an HTTP GET request to the target's base URL and examines the response headers to identify SAP NetWeaver Application Server instances. This information helps assess whether the system might be susceptible to CVE-2025-31324...

CVE-2025-0994

CVE-2025-0994 How does this detection method work? This Nuclei template extracts the version stored in the HTML body and based on the version we can determine whether the instance is vulnerable to CVE-2025-0994 or not. Patched version: 15.8.9 How do I run this script? 1. Download Nuclei from here...

CVE-2026-45585

🔑 CVE-2026-45585 - YellowKey 🔓 Advanced mitigation for CVE-2026-45585 YellowKey 📌 What is YellowKey Vulnerability? YellowKey CVE-2026-45585 is a zero-day physical attack vulnerability discovered in May 2026 that allows attackers with physical access to completely bypass BitLocker encryption on...

CVE-2026-31024

CVE-2026-31024 Vulnerability Report: Steghide Stack-Based Buffer Overflow & Information Disclosure Field| Value ---|--- Target Application| Steghide Linux Binary Affected Version| 0.5.1 Confirmed; earlier versions likely affected Vulnerability Type| Stack-Based Buffer Overflow CWE-121 Impact|...