CVE-2025-49091-Gajim-RCE

CVE-2025-49091 - Python Proof of Concept Proof-of-concept PoC exploit for CVE-2025-49091 for Gajim encrypted messenger. Discovered by Patryk Ptak SivertPL and Dennis Dast independently, exploit by Patryk Ptak. Files CVE-2025-49091.py – Python PoC. Usage root@kitploit: python3 CVE-2025-49091.py...

exphub

Уведомление В конце концов, я посчитал неудобным держать каждую уязвимость и каждый отдельный скрипт, поэтому объединил все poc и exp скрипты в один, который может выполнять односканирование + эксплуатацию уязвимостей. Так как в последнее время я занимаюсь интеграцией, exphub долгое время не...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Fully Weaponized NVIDIA Container Toolkit Exploit References https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

Tomcat Vulnerability Scanner A tool to detect CVE-2025-31650 in Apache Tomcat servers using Shodan integration. Features HTTP/2 priority vulnerability detection Shodan target discovery CSV/JSON reporting Installation root@kitploit: python -m venv venv source venv/bin/activate pip install -r...

CVE-2025-8088-Exploit

CVE-2025-8088 WinRAR एक्सप्लॉइट 🔓 WinRAR भेद्यता CVE-2025-8088 के लिए एक proof-of-concept एक्सप्लॉइट, जो संस्करण 7.12 और उससे निचले संस्करणों को प्रभावित करता है। यह टूल एक दुर्भावनापूर्ण RAR संग्रह बनाता है जो पेलोड को ऑल्टरनेट डेटा स्ट्रीम ADS में पाथ ट्रैवर्सल के साथ एम्बेड करता है, जो संभावित...

CVE-2026-9082-Mass_Scanner

CVE-2026-9082-MassScanner Mass Scanner For Drupal Exploit CVE-2026-9082 To Setup ExploitPOC Script execute this command : root@kitploit: pip install requirements.txt To use the ExploitPOC Script execute this Command : root@kitploit: python exploitpoc.py -t targets.txt -o results.txt -p 16 Éna Mas...

POC-exploit-for-Dolibarr

POC exploit for Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost...

CVE-2017-17692

CVE-2017-17692 Exploit Title: SOP Bypass Date: 06 सितम्बर 2017 Software Link: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en Exploit Author: Dhiraj Mishra Contact: http://twitter.com/mishradhiraj Website: http://datarift.blogspot.in/ श्रेणी: ब्राउज़र वीडियो PoC:...

CVE-2021-40346

CVE-2021-40346 — HAProxy Integer Overflow leading to HTTP Request Smuggling Vulnerability Summary HAProxy is an open-source reverse proxy and load balancer that handles load distribution and ACL access control rules processing. CVE-2021-40346 is an ACL bypass vulnerability that occurs when HAProx...

CVE-2024-6529

Proof of Concept PoC for Vulnerabilities in WordPress Plugins This repository contains Proof of Concept PoC scripts for various vulnerabilities discovered in different WordPress plugins. These scripts demonstrate how attackers can exploit these vulnerabilities to perform malicious actions. Table ...

CVE-2023-4220

Proof of concept exploit for CVE-2023-4220 Affected product : Chamilo = 1.11.24 This CVE abuses an unauthenticated file upload vulnerability in Chamilo 1.11.24 and lower. An attacker has the ability to upload PHP files with no restrictions, leading to RCE. How to use root@kitploit: python3...

AutoIt-Obfuscator

AutoIt Obfuscator — Obfuscation for AutoIt Script Source Code AutoIt Obfuscator is a tool to modify AutoIt script source code in this way to make an analysis of obfuscated code very difficult. More technical details, downloads, documentation available at:...

PoC-CVE-2026-46331

This repository contains a proof-of-concept PoC exploit for CVE-2026-46331, a Linux kernel local privilege escalation vulnerability in the traffic-control subsystem. Vulnerability Summary The flaw exists in the actpedit packet-editing action, where the kernel may calculate the copy-on-write...

cve-2025-55182-poc

CVE-2025-55182 React2Shell - Academic Proof of Concept ⚠️ DISCLAIMER: EDUCATIONAL USE ONLY This repository contains functional exploit code for a critical vulnerability CVSS 10.0. It is intended strictly for academic research, security analysis, and educational purposes. Do not use this code...

CVE-2011-2523

CVE-2011-2523 Exploitation 🚀 Usage This poc script allows you to exploit the CVE-2011-2523 VsFTPd 2.3.4 Backdoor Command Execution help ⚒️ Installation root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip install pwntools argpar...

MLflow-Vuln

Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf MLflow-Vulnerability MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced One of the most popular tools in a ML system is MLflow that is used for managing end-to-end machine learning lifecycle. I tested the security of MLflow and reproduced ...

mysqli

MySQLi.py - Time-Based Blind SQL Injection for MySQL MySQLi.py is a personal practice project, inspired by Exploit-DB exploit 46635, used during the SimpleCTF room on TryHackMe. What caught my attention in the original exploit was its ability to extract credentials and even crack the password has...

Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-

Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597- Sri Lanka Institute of Information Technology root@kitploit: Assignment 1 M. P. D. M. Dias IT19165530 MLBWDY2S113.1 Point to Point Protocol Daemon RCE Vulnerability CVE-2020-8597 Systems and Network Programming– IE2012 Content 1...

CVE-2021-39473

CVE-2021-39473 Affected Product Code Base HotelManager - v1.2 Affected Component Kernel.php; Middleware Attack Type Remote Attack Vectors To exploit this vulnerability the user needs to create "rooms" or "guests" or "reservations" or "users" and in the "comment" or "contact" field can execute a x...

Hacking-pdf.js-vulnerability

🚨 CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js This project demonstrates and analyzes CVE-2024-4367 , a high-severity vulnerability in Mozilla’s PDF.js library that allows arbitrary JavaScript execution through improper type checking in font handling code. Our research shows how a...