RegPwnBRc4BOF

RegPwn BOF for Brute Ratel C4 My Brute Ratel C4 BOF reimplementation of port of the RegPwn exploit by Filip Dragovic @Wh04m1001 / MDSec ActiveBreach. This is a sloppier BRc4 BOF reimplementation of the Flangvik's CS BOF reimplementation of the original C exploit. All credit still goes for the...

af_packet.c

afpacket.c Prueba de concepto para verificar los privilegios de afpacket.c con el fin de validar los privilegios adquiridos por cualquier hacker tras una explotación exitosa de CVE-2021-22600 Es solo una muestra de prueba de concepto generada por un LLM y no cubre todos los casos. La idea básica...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0,...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook Program Code Lua + Python trigger root@kitploit: -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" loc...

CVE-2026-64600-Exploit

This repository does not have a README...

cve-2026-29000

CVE-2026-29000 Exploit JWT Authentication Bypass in pac4j-jwt via JWE-wrapped PlainJWT Vulnerability Description CVE-2026-29000 is a critical authentication bypass vulnerability affecting pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3. The vulnerability allows remote attackers to forge...

FortiLOL

FortiLOL FortiClient FortiShield exploit CVE-2015-5736 for Windows 10 1809...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

CVE-2026-67401-cPanel-EmailTrack-SQLi

CVE-2026-67401 — cPanel & WHM EmailTrack SQL Injection → Root RCE IOC Scanner, Detection Toolkit & Remediation Guide for the cPanel EmailTrack SQL Injection Vulnerability Keywords: CVE-2026-67401, cPanel exploit, cPanel SQL injection, WHM vulnerability, EmailTrack SQLi, cPanel root RCE, cPanel IO...

CVE-2026-21509-PoC

CVE-2026-21509 — Educational Dummy PoC for Defender Visibility ⚠️ This repository provides a harmless, non-exploit Proof of Concept. Its purpose is to support defensive research , EDR/AV visibility testing , and training. It does not exploit CVE‑2026‑21509 and contains only dummy OLE artifacts. 📝...

CVE-2024-2961-XXE-Exploit

CVE-2024-2961 CNEXT XXE 通道适配利用脚本 将 Ambionics 官方 cnext-exploits 的 PHP 文件读取 - RCE 利用脚本，适配到 SVG 上传 + XXE 任意文件读取 场景（PolarisCTF 2026 "头像上传器" 一类题目）。 前置条件 目标：Linux + glibc 更新 avatarname - 请求解析接口回显。 2. 过滤器分隔符| - ：XML 实体 URL 中含 时 libxml 解析失败（实测 DOMDocument 返回空文档）； 支持不带前缀的裸过滤器按 分隔，等价于 。...

CVE-2021-32675

CVE-2021-32675 – Redis Pre-Allocation Denial of Service OOM This repository contains a functional exploit for CVE-2021-32675, a denial-of-service DoS vulnerability in Redis. The flaw allows unauthenticated remote attackers to trigger massive memory pre-allocations on the Redis server by sending...

CVE-2026-63030

CVE-2026-63030 WordPress REST Batch Route-Confusion SQL Injection CVE-2026-63030 Proof of Concept Research, Exploit Development & Documentation by Ch4120N ⚠️ Legal Disclaimer This repository and the accompanying tool exploit.py are intended strictly for educational purposes, authorized penetration...

CVE-2026-25250

🕷️ CVE-2026-25250: Improper Trusted Bootloader Chain Validation A Microsoft-signed third-party bootloader that loads a secondary EFI binary with no signature or integrity verification, collapsing the Secure Boot chain of trust from within. 📑 Table of Contents Research Context Official References...

CVE-2022-25012-dvr4-weak-password-encryption

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

CVE-2026-21962

CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Plug-in Access-Control Bypass via URI Normalization Inconsistency An independently reproduced exploit and analysis for CVE-2026-21962 improper access control, CVSS 10.0 in Oracle HTTP Server / the Oracle WebLogic Server Proxy Plug-in for...

detection-rules dev-v2.2.0

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

CVE-2026-21509

CVE-2026-21509 — Microsoft Office OLE Security-Feature Bypass Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here for an actively exploited vulnerability. A security-feature bypass in Microsoft Office that lets a crafted document load COM...

cve-2025-66398

⚠️ cve-2025-66398 - Simple RCE Proof of Concept Tool ⚙️ About This Tool This project demonstrates a remote code execution RCE vulnerability in Signal K Server versions 2.18.0 and earlier. The proof of concept PoC shows how an attacker could run commands on a vulnerable device. This tool is designed...

inetutils-telnetd-auth-bypass

inetutils-telnetd 인증 우회 실습 환경, CVE-2026-24061 oss-sec 메일링 리스트에 공개된 inetutils-telnetd 1.9.3 - 2.7의 인증 우회를 실습하기 위한 소규모 실습 환경입니다. 0 이 컨테이너는 Debian 11 Bullseye에서 inetutils-telnetd가 여전히 취약한 버전이라는 사실에 의존합니다. 이 문서를 작성하는 시점의 버전은 다음과 같습니다: root@kitploit: root@ba8cc6858b87:/ apt search inetutils-telnetd...