CVE-2025-32462_32463-Lab

CVE-2025-32462 y CVE-2025-32463 – Laboratorio PoC Este es un laboratorio basado en contenedores y PoC para las siguientes vulnerabilidades en sudo: CVE-2025-32462 – bypass de la lógica de coincidencia de host sudo -h CVE-2025-32463 – escape de la biblioteca NSS de chroot sudo -R 🔒 Solo con fines...

wordpress-cve-2021-29447

WordPress CVE-2021-29447 exploit Exploit WordPress Media Library XML authenticated External Entity Injection XXE to exfiltrate files. Patched in WordPress 5.7.1. Required valid WordPress credentials to interact with Media Library. Usage root@kitploit: python3 wordpress-cve-2021-29447.py -l...

EUVD-2026-74805

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

CVE-2026-87827 KGUARD DVR unauthenticated remote command execution vulnerability

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

CVE-2026-87827

KGUARD DVR devices running firmware from 2016 expose an unauthenticated system command execution service bound to all network interfaces (0.0.0.0), allowing a remote attacker to execute arbitrary commands and achieve complete device compromise . Firmware released after 2017 mitigates the issue by...

CVE-2026-87827 KGUARD DVR unauthenticated remote command execution vulnerability

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

CVE-2019-16759-Vbulletin-rce-exploit

This repository does not have a README...

CVE-2023-22809

CVE-2023-22809 Ref: https://vulners.com/cve/CVE-2023-22809 Exploit Title: sudo 1.8.0 - 1.9.12p1 - Privilege Escalation Exploit Author: n3m1.sys CVE: CVE-2023-22809 Date: 2023/01/21 Vendor Homepage: https://www.sudo.ws/ Software Link: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz Version: 1.8.0 to...

Joomla-CVE-2023-23752-Exploit-Script

Usage root@kitploit: python exploit.py http://example.com...

CVE-2022-1388

CVE-2022-1388 F5 BigIP exploit CVE-2022-1388 scanner...

CVE-2022-26134_conFLU

CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on Atlassian Confluence Exploit Usage root@kitploit: python3 conFLU.py -h Usage: conFLU.py -h -u URL -f F -cmd CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD,...

CVE-2022-1388_refresh

CVE-2022-1388 - refresh PoC for exploiting CVE-2022-1388 on BigIP F5 Exploit Usage root@kitploit: python3 refresh.py -h usage: refresh.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --comma...

CVE-2022-2602

CVE-2022-2602 This repository contains exploits for CVE-2022-2602. There are two versions of it: Exploit using userfaultfd technique. Exploit using inode locking technique. Enjoy! : LukeGix...

CVE-2019-2729_creal

CVE-2019-2729 - creal PoC for exploiting CVE-2019-2729 on WebLogic Exploit Usage root@kitploit: python3 creal.py -h usage: creal.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --command CMD...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...

CVE-2021-3560

Polkit Vulnerability - CVE-2021-3560 📕 Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...

CVE-2023-23396

CVE-2023-23396 Aquí puedes descargar el exploit. Aquí puedes leer mi reporte. Aquí puedes invitarme a un unicornio 🦄 PD Al momento de escribir esto 2023-04-07, la versión de cliente de Microsoft Excel sigue siendo vulnerable aquí hay más información. ¡Comparte el Conocimiento!...

CVE-2023-22515

Confluence Vulnerability - CVE-2023-22515 📓 Introduction Atlassian was informed about a possible vulnerability that could be exploited and compromising the environment through administrative access. On October 4, 2023, Atlassian released a security advisory regarding CVE-2023-22515 which got a CV...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit Un script para explotar CVE-2022-1227. Antecedentes Se recomienda Ubuntu 20.10. Podman TODO: agregar cuál es el principio de esta vulnerabilidad Instalar podman Siga las instrucciones del documento oficial: https://podman.io/getting-started/installationinstalling-on-linux Par...

CVE-2019-14271_Exploit

CVE-2019-14271Exploit A convenient and time-saving auto script of building environment and exploit it. References https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271...