CVE-2021-3560_Polkit

CVE-2021-3560 Polkit Élévation locale de privilèges root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ Un exploit automatisé pour la vulnérabilité...

CVE-2025-55182-PoC-exploit

CVE-2025-55182-PoC-exploit ثغرة تنفيذ الأوامر عن بعد RCE في Next.js عبر دوال خادم React root@kitploit: ❯ python3 cve-2025-55182-exploit.py 0:"a":"$@1","f":"","b":"3OmR5Ifk9dmFJ1coB7-Wc" 1:E"digest":"uid=0root gid=0root...

CVE-2026-84287

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-73775

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...

CVE-2026-73778

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...

CVE-2026-73781

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73771

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources...

CVE-2026-73757

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery SSRF attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential...

CVE-2026-73750

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2026-73749

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

CVE-2026-73524

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic removes only the first occurrence of eac...

CVE-2017-5638

CVE-2017-5638 이 스크립트는 Apache Struts 2 취약점CVE-2017-5638, 일명 Struts-Shock을 검증하기 위한 것입니다. 악성 페이로드를 주입하지 않고 오직 'STRUTS2-VALIDATION'이라는 HTTP 헤더만 주입하여 취약한지 여부를 검증할 수 있으므로 완전히 무해합니다. 멀티스레드 기능 덕분에 전 세계에 분산된 2.5k개 이상의 애플리케이션을 10분 이내에 실행할 수 있습니다. 따라서 대규모 엔터프라이즈 애플리케이션을 검증하는 데 매우 유용합니다. cve-2017-5638...

refreshing-soap-exploit

Ceci est une preuve de concept pour CVE-2022-41622, qui est une CSRF dans F5 Big-IP menant à une exécution de code à distance. L'utilisation est un peu capricieuse, mais je vais vous guider à travers mes cas d'utilisation préférés. La vulnérabilité La vulnérabilité principale est une falsificatio...

Etern-blue-Windows-7-Checker

Vérificateur Eternalblue SMB1 Windows7/10 Mis à jour et détecte désormais Windows 7 ainsi que les anciennes versions de Windows 10 qui prennent en charge SMB 1. Je n'ai implémenté que SMB 1 et tout serveur SMB 2 que vous testez avec cet outil renverra "not vulnerabile". J'ai étudié la structure...

CVE-2023-35078

CVE-2023-35078-Poc-Exploit تم بناء هذه الأداة بلغة golang لاستغلال ثغرة CVE-2023-35078 استخدام هذه الأداة سهل للغاية، قم بتشغيل هذا الأمر في الطرفية الخاصة بك root@kitploit: λ git clone https://github.com/LazyySec/CVE-2023-35078.git λ cd CVE-2023-35078 λ CVE-2023-35078 git:main go build...

CVE-2026-84288

NousResearch hermes-agent (up to version 0.18.2) contains a denial of service vulnerability in the HermesACPAgent.prompt function located in acp_adapter/session.py (ACP Prompt Workflow component). The attack can be performed remotely with low privileges and no user interaction required. A proof-o...

CVE-2026-84288 NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

CVE-2026-84288 NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Межпроцессное взаимодействие через разделяемую память — это концепция, при которой два или более процесса могут иметь доступ к общей памяти. Связь осуществляется через эту разделяемую память, и изменения, внесённые одним процессом, могут быть...

CVE-2021-43798-Exploit-for-Windows-and-Linux

CVE-2021-43798-Exploit-for-Windows-and-Linux Exploit modifié pour CVE-2021-43798. Code de l'exploit d'origine : https://www.exploit-db.com/exploits/50581 Modifications : Cette version modifiée est compatible avec les serveurs sous-jacents Windows et Linux. Lorsqu'un utilisateur saisit un chemin...