CVE-2017-7089

CVE-2017-7089 Impacto : El procesamiento de contenido web maliciosamente diseñado puede llevar a un cross-site scripting universal Descripción : Existía un problema lógico en el manejo de la pestaña principal. Este problema se solucionó con una mejor gestión del estado. Safari 10 Local SOP bypass...

CVE-2023-2033

Exploit para CVE-2023-2033...

CVE-2019-18634

CVE-2019-18634 ⚠️ This code has only been tested on sudo 1.8.25. The bug impacts 1.8.30, but there are differences in character handling that prevent this PoC from executing this does not mitigate the exploitability of the bug. See 1 ⚠️ Functional exploit for CVE-2019-18634, a heap buffer overflow...

MS16-032

MS16-032CVE-2016-0099 for SERVICE ONLY this exploit can only use on SERVICE do logical exploit,on logical exploits...

CVE-2025-30406

CVE-2025-30406 ViewState Exploit PoC Overview This is a Proof-of-Concept PoC script demonstrating a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET applications. It uses ysoserial to generate a malicious ViewState payload and sends it to a user-specified URL to execute a provided...

CVE-2024-3400

CVE-2024-3400: OS Command Injection Vulnerability Description: CVE-2024-3400 is a security vulnerability affecting applications or services that accept user input and execute operating system commands based on that input without adequate validation. This vulnerability allows attackers to inject...

exploit-CVE-2023-23752

Joomla! divulgación de información - exploit CVE-2023-23752 Joomla! 4.2.8 - Divulgación de información no autenticada Exploit para CVE-2023-23752 4.0.0 = Joomla = 4.2.7. EDB-51334 PacketStorm WLB-TODO Uso Ejemplo Requisitos httpx docopt.rb paint Ejemplo usando gem: root@kitploit: gem install http...

CVE-2021-3129_exploit

CVE-2021-3129exploit Exploit para CVE-2021-3129 Configuración del laboratorio: root@kitploit: $ git clone https://github.com/laravel/laravel.git $ cd laravel $ git checkout e849812 $ composer install $ composer require facade/ignition==2.5.1 $ php artisan serve Uso: root@kitploit: $ git clone...

NextSploit

🔍 NextSploit: Escáner y Exploit de Next.js CVE-2025-29927 ⚠️ NextSploit es una herramienta de línea de comandos diseñada para detectar y explotar CVE-2025-29927 , una falla de seguridad en Next.js. La herramienta primero identifica si un sitio web objetivo está ejecutando Next.js y determina si su...

IngressNightmare-POCs

IngressNightmare-POCs CVE-2025-24513: https://github.com/kubernetes/kubernetes/issues/131005 CVE-2025-24514: https://github.com/kubernetes/kubernetes/issues/131006 CVE-2025-1097: https://github.com/kubernetes/kubernetes/issues/131007 CVE-2025-1098:...

CTF-hw0-BufferOverflow

!Review Assignment Due Datehttps://classroom.github.com/asse...

CVE-2026-41651-Python

Pack2TheRoot: CVE-2026-41651 Python Python PoC of the PackageKit TOCTOU Local Privilege Escalation exploit. Any local unprivileged user can install arbitrary packages as root with no authentication. Field| Value ---|--- CVE| CVE-2026-41651 Component| PackageKit daemon packagekitd Affected version...

CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Script-only privilege escalation chain using CVE-2025-6019 and UDisks2 no filesystem image included. Credits, Context & Exploit Chain This repository does not introduce a new vulnerability. The privilege-escalation technique implemented here is fully based on...

CVE-2021-46074

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

cve-2023-36802

PoC for CVE-2023-36802 Exploit targeting MSKSSRV.SYS driver. The complete exploit works on vulnerable Windows 11 & 10 systems. Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Valentina Palmiotti @chompie1337 from IBM X Force Google'...

CVE-2022-21907

CVE-2022-21907 Un exploit DoS real para CVE-2022-21907 Soporta IPv4/IPv6/HTTP/HTTPS Sistemas afectados root@kitploit: - Windows - 10 Versión 1809 para sistemas de 32 bits - 10 Versión 1809 para sistemas basados en x64 - 10 Versión 1809 para sistemas basados en ARM64 - 10 Versión 21H1 para sistema...

CVE-2017-11882-metasploit

CVE-2017-11882-metasploit Este es un módulo de Metasploit que explota CVE-2017-11882 utilizando el POC a continuación: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Instalación 1. Copia el archivo cve201711882.rb a...

CVE-2019-11539

CVE-2019-11539 Descubrimiento original: Orange Tsai, Meh Chang Autores: Justin Wagner, Alyssa Herrera Agradecimientos a: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Descripción de la vulnerabilidad En Pulse Secure Pulse Connect Secure versión 9.0RX anterior a 9.0R3.4, 8.3RX anterior a 8.3R7.1,...

whatsapp-mitd-mitm

WhatsApp MitD & MitM Introducción Este repositorio contiene código PoC y herramientas que fueron desarrolladas como parte de nuestra investigación 01 sobre la explotación remota de vulnerabilidades Man-in-the-Disk MitD en WhatsApp para Android. Como se discutió en nuestra publicación del blog, el...

CVE-2026-76578 Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...