pdfjs-vuln-demo

PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Detection Artifact Generator for WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f See our blog post for technical details Detection in Action root@kitploit: python watchTowr-vs-WatchGuard-CVE-2025-9242.p...

fatal_core_dump

Misterio de Asesinato del Core Dump Fatal Repositorio para generar un sitio web de juego de misterio de asesinato con depuración de core dump. ESTE REPO CONTIENE SPOILERS DEL JUEGO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Puedes jugarlo aquí: https://www.robopenguins.com/fatalcoredump/ Para una entrada ...

CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Security Researcher: Jacob Archuleta @nullze 📝 Vulnerability Overview A critical Denial of Service DoS vulnerability was discovered in the Tesla Model 3, Model S, and Model X all versions prior to 2020.4.10. This vulnerability allowed a remo...

CVE-2026-82601 SeaCMS err.php cross site scripting

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for...

CVE-2026-82601 SeaCMS err.php cross site scripting

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for...

EUVD-2026-68310

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for...

CVE-2026-82601

SeaCMS versions up to 13.6 are affected by a reflected cross-site scripting (XSS) vulnerability in the /err.php file. By manipulating the errtxt parameter, a remote attacker can inject malicious script that executes in the victim's browser upon interaction. The attack requires user interaction bu...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS Privilege Escalation This repository contains a Python script that automates the exploitation of the CVE-2025-2304 privilege escalation vulnerability in Camaleon CMS. It has been tested on version 2.9.0. Usage root@kitploit: python exp.py http://target.exmaple user...

CVE-2018-14714-RCE-exploit

CVE-2018-14714 PoC de RCE Vulnerabilidad RCE en routers WiFi ASUS Este PoC es solo con fines de aprendizaje e investigación. No lo utilices para actividades ilegales; eres el único responsable de cualquier consecuencia legal. Esta es una prueba realizada después de modificaciones de código basada...

gogs-CVE-2025-8110

Gogs CVE-2025-8110 PoC This repository contains a Proof of Concept PoC for CVE-2025-8110, a Remote Code Execution RCE vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the sshCommand configuration. Usage To run t...

CVE-2023-49103

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ Exploit for...

CVE-2025-54322

CVE-2025-54322 - Escáner de RCE Pre-Auth para XSpeeder SXZOS Un escáner de vulnerabilidades multihilo para CVE-2025-54322, una vulnerabilidad de ejecución remota de código no autenticada en el firmware XSpeeder SXZOS que afecta a más de 70.000 hosts a nivel mundial. 📋 Tabla de Contenidos Acerca d...

CVE-2026-53435

CVE-2026-53435 — Jenkins Deserialization → Arbitrary File Read PoC First public proof-of-concept for CVE-2026-53435, built when only the advisory existed and no PoC was published anywhere. Reconstructed from a vague one-line advisory over 8.5 hours on a Friday night — not by writing the exploit b...

struts-pwn

struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...

struts-pwn

struts-pwn Un exploit para Apache Struts CVE-2017-5638 Uso Probando una sola URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Probando una lista de URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Comprobando si la vulnerabilidad existe en una sola UR...

badepoll-selinux-disabler

badepoll-selinux-disabler Standalone extraction of the SELinux-disabling stage from the CVE-2026-43074 eventpoll UAF exploit. It races the eventpoll loop-depth check epgetupwardsdepthproc to write a zero into selinuxstate.enforcing, switching the device to Permissive via a single-byte kernel writ...

CVE-2025-8061-Exploit

CVE-2025-8061 Exploit Overview Proof-of-Concept exploit for LnvMSRIO.sys Lenovo MSR I/O Driver, demonstrating arbitrary physical memory read/write and kernel memory access via Superfetch VA-to-PA translation. Driver Information Property| Value ---|--- Driver Name| LnvMSRIO.sys Device Name|...

ColdFusionPwn

ColdFusionPwn Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12. Description The tool allows you to generate serialized AMF-payloads to exploit the missing input validation of allowed classes. For details see our blog post. Install Get the latest version of ysoserial. Get...

CVE-2025-6018-6019-PoC

CVE-2025-6018 y CVE-2025-6019: PoC de Escalada de Privilegios Local Un robusto Proof of Concept PoC para encadenar CVE-2025-6018 bypass de sesión activa de PAM/Polkit y CVE-2025-6019 fallo de montaje SUID en libblockdev para lograr acceso root en sistemas Linux vulnerables. Aviso legal Esta...