838984 matches found
CVE-2023-45158
CVE-2023-45158 Steps 1. Run the webserver root@kitploit: cd web2py python3 web2py.py 2. Inject your command using the URL http://:8000/hack?msg=%27%3B%3B%27. Replace and with your values. Examples 1. Create a file on the server http://:8000/hack?msg=%27%3Btouch%20hack%3B%27 2. Reverse shell On th...
CopyFile_CVE-2026-31431
CopyFileCVE-2026-31431 Error de copia CVE-2026-31431 – Explotación de escalada de privilegios local Un error lógico en la plantilla AEAD authencesn del kernel de Linux permite a un usuario sin privilegios escribir 4 bytes controlados en la caché de páginas de cualquier archivo legible. El script ...
ICT287_CVE-2022-30190_Exploit
ICT287CVE-2022-30190Exploit Project on CVE-2022-30190 exploitation and mitigation strategies 📌 About This repository contains my final project for ICT287, where I explore the CVE-2022-30190 "Follina" vulnerability. The project covers: Detailed analysis of the exploit Step-by-step execution proces...
honeypot-dlink-CVE-2024-3273
honeypot-dlink-CVE-2024-3273 Quick and dirty honeypot for CVE-2024-3273. This template can be used to setup a basic honeypot in 10min. TL;DR: Find fofa, shodan, onyphe, .... Clone it with the wgetclonehttp.sh. Manual tinkering to make the honeypot more realistic cloning isn't perfect so some file...
CVE-2026-75966 Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter
The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episodecontributor....comment' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
EUVD-2026-74609
The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episodecontributor....comment' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2026-75966
The Podlove Podcast Publisher WordPress plugin (all versions ≤ 4.5.5) is vulnerable to Stored Cross-Site Scripting via the episode_contributor[..][..][comment] parameter. The root cause is insufficient input sanitization and output escaping: the contributor comment is stored in a plugin-managed c...
CVE-2026-75966 Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter
The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episodecontributor....comment' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE
CVE-2026-20127-Cisco SD-WAN Pre-Authentication Remote Code Execution Overview This repository contains a proof-of-concept PoC exploit for CVE-2026-20127 , a critical pre-authentication remote code execution RCE vulnerability affecting Cisco Catalyst SD-WAN Controller formerly vSmart and Cisco...
CVE-2023-49070_CVE-2023-51467
CVE-2023-49070CVE-2023-51467 CVE-2023-49070 exploit and CVE-2023-49070 & CVE-2023-51467 vulnerability scanner...
heaplens
🔎 Heaplens CMPT733 Cybersecurity Lab II Project 📂 Repo Structure root@kitploit: . ├── README.md ├── heaplens.png ├── heaplens.py ├── logs │ ├── sudoedit-.txt │ └── ... └── tests ├── Makefile ├── env-in-heap └── ... README.md: right here! heaplens.py: the main script logs/: contains some sample...
log4jtest
Introduction This repository is setup to quickly test the log4j vulnerability using Docker and Hashicorp Terraform. All of the components of this test will run in Docker containers on the Docker network, accessible via 'host.docker.internal'. Credits / Disclaimer This test environment is derived...
cve-2026-31431-poc
CVE 2026-31431 POC Esta vulnerabilidad explota un fallo en la función de verificación de longitud authencesn en Linux, lo que provoca que una página sucia dirty page se escriba de vuelta write back en un lugar al que el usuario no tiene permisos, causando una escalada de privilegios El principio ...
CVE-2026-41940-POC
CVE-2026-41940 – PoC de Bypass de Autenticación en cPanel/WHM Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2026-41940, que demuestra un bypass de autenticación en múltiples pasos en cPanel/WHM mediante inyección CRLF y envenenamiento de sesión. Aviso legal: Este código ...
RootMyVivo
RootMyVivo 🛡️ Root con un clic para dispositivos vivo/iQOO con bootloader bloqueado. Basado en CVE-2026-43499 GhostLock + KernelSU. Cómo funciona 1. Detecta automáticamente el modelo y la versión del kernel 2. Descarga el payload adecuado desde RootMyVivo-Payloads 3. Ejecuta el exploit LDPRELOAD /...
CVE-2023-21887
CVE-2023-21887 Exploit This script scans a list of URLs for the CVE-2023-46805 vulnerability and exploits it Usage 1. Install required dependencies: root@kitploit: pip install httpx...
GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering
A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...
CVE-2026-20127-Exploit-Extension
Executive Summary The CVE-2026-20127 Defensive Companion is a premier, enterprise-grade Browser Extension engineered for proactive threat intelligence and defensive analysis. This tool encapsulates authoritative technical research concerning the authentication bypass vulnerability in the Cisco...
CMS-made-simple-sqli-python3
CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - Inyección SQL reescrito para python3, CVE-2019-9053 Me resultó problemático ejecutar este exploit en kali linux, ya que python2 no tiene termcolor, así que con muy pocos cambios lo hice funcionar con python3. Todo el crédito va para:...