CVE-2025-32462

CVE-2025-32462 - Exploit de Bypass de Host de Sudo Descubrimiento Original Esta vulnerabilidad fue descubierta por Rich Mirch. Más detalles se pueden encontrar en: https://cxsecurity.com/issue/WLB-2025070022 Acerca de Este script es un exploit para CVE-2025-32462, que permite la escalada de...

ChromeSHELFLoader

Chrome SHELF Loader An exploit for CVE-2020-6418 implementing a SHELF Loader. Published as part of Tmp.0ut volume 2...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate This POC uses Spring / Hibernate, however a similar approach of rmi - deserialization could be used to trigger any deserialization vulnerability TL;DR root@kitploit: $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-bina...

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...

cve-2021-44228-rce-poc

CVE-2021-44228 Remote Command Execution PoC This repository allows security researchers to experiment with remote code execution by offering an implementation of an attack server that loads a custom exploit on a vulnerable application that contains log4j. ⚠️ The tool is intended for self-assessmen...

Tomcat-CVE_2025_24813

Tomcat CVE-2025-24813 playground Exploit was forked from https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md did not work for me Content 1. ROOT.war is a minimal app with one servlet including apache-common-3.1 and spawing a session 2. ysoserial.jar taken original from ysoserial...

CVE-2026-87592

A flaw was found in chromium-browser. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, a security...

CVE-2026-87539

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the network component by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosure...

CVE-2026-87490

A flaw was found in the Transactions Platform of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...

CVE-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started root@kitploit: echo ""...

CVE-2026-87555

A flaw was found in the GPU component of Google Chrome on Android. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a crafted HTML page. This could allow the attacker to read memory outside of the browser's security sandbox, leading to informatio...

CVE-2026-87457

A flaw was found in the Updater component of Google Chrome. A local attacker could exploit a race condition to execute arbitrary code outside of the browser's security sandbox by using a local program. This could lead to a complete compromise of the affected system...

poppy

poppy : CVE-2021-4034 CVE-2021-4034 PoC , polkit 0.131 Usage Tested on Arch Linux Manjaro & Axyl OS root@kitploit: git clone https://github.com/tahaafarooq/poppy make ./poppy Super user creation exploit root@kitploit: bash -c "$curl -fsSL...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - JSP Upload Bypass / Remote Code Execution for Python3 I just made a few adjustments to the original script to be compatible with Python 3! If there's any problems or issues faced, feel free to shoot me an email...

git-vuln-finder

git-vuln-finder Encontrando posibles vulnerabilidades de software a partir de mensajes de confirmación de git. El formato de salida es un JSON con la confirmación asociada que podría contener una corrección relacionada con una vulnerabilidad de software. La búsqueda se basa en un conjunto de...

cve-2018-11776-docker

Contenedor Docker y exploit PoC de CVE-2018-11776 escrito en Go Puedes construir tu propia imagen y ejecutarla: root@kitploit: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename O simplemente puedes usar la que creé con cariño para ti: root@kitploit: docker...

CVE-2026-87589

A flaw was found in Chromium's SiteIsolation component. A remote attacker, who has already compromised the browser's renderer process, could exploit incorrect authorization by crafting a malicious HTML page. This could allow them to bypass system access restrictions...

CVE-2026-87531

A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit an information leak in Cross-Origin Resource Sharing CORS by using a specially crafted HTML page. This vulnerability allows the attacker to obtain sensitive data from other origins,...

CVE-2026-87461

A flaw was found in Chromium, specifically in its Core component. A remote attacker could exploit this vulnerability by using a specially crafted Chrome extension. This could lead to the unauthorized disclosure of sensitive cross-origin data...

CVE-2026-87652

A flaw was found in Google Chrome's PushAPI. A remote attacker, after compromising the renderer process, could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized...