poc-redis

To run the exploit please extract the attached ZIP and follow these steps on Linux: 1. Set up a virtualenv/install the Redis client root@kitploit: $ python3 -m venv .venv $ source .venv/bin/activate $ pip install -r requirements.txt 2. In another terminal, run the Redis docker image Or build from...

Exploit for Unsafe Reflection in Progress Telerik_Ui_For_Asp.Net_Ajax

Telerik RadAsyncUpload RCE Exploit CVE-2026-13181 through 1...

Exploit for CVE-2026-28496

CVE-2026-27604 + CVE-2026-28496 — FOSSBilling Pre-Auth RCE Cha...

PNGboomer-CVE-2026-77622

PNGboomer — CVE-2026-77622 Exploit de denegación de servicio para el listener HTTPS de Sliver C2. Fuerza bruta el nonce de codificación PNG por sesión y entrega una bomba de descompresión que agota la memoria del servidor. Publicado como GHSA-663m-7x7m-g4fw. Resumen El canal C2 HTTPS de Sliver...

CVE-2025-2945-pgAdmin-RCE

CVE-2025-2945 — pgAdmin 4 Authenticated Query Tool RCE CVSS 3.1: 9.9 Critical · Affects: pgAdmin 4 8.10 – 9.1 · Fixed in: 9.2 April 4, 2025 CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code / Eval Injection A proof-of-concept exploit for CVE-2025-2945, an authenticated...

Exploit for CVE-2026-66066

No d...

Exploit for SQL Injection in Wordpress

wp2shell Lab — CVE-2026-60137 & CVE-2026-63030 WordPress Core...

Exploit for CVE-2026-53519

Lab CVE-2026-53519 - Nezha Dashboard pre-auth path traversal...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 — Zimbra zimbra-snmp Unauthenticated OS Command...

Exploit for Heap-based Buffer Overflow in F5 Nginx_Gateway_Fabric

CVE-2026-42533 Lab — NGINX Two-Pass Capture Clobbering RCE...

Exploit for Missing Authentication for Critical Function in Splunk

CVE-2026-20253 Lab Environment Splunk Enterprise Pre-Auth R...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak Reset-Credentials Flow Bypass Lab...

Exploit for SQL Injection in Osgeo Geoserver

Lab CVE-2023-25157 va CVE-2023-25158 Lab nay dung GeoServer/P...

Exploit for Unrestricted Upload of File with Dangerous Type in Drupal

Stack/Builder Builder for stack middlewares based on HttpKern...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – SPHINCS+ WOTS+ Weak Randomness Signature Forgery Overview An implementation of the SPHINCS+ post‑quantum signature scheme uses a flawed random number generator during WOTS+ signature generation. The same nonce k is reused across multiple signatures, allowing an attacker to recove...

http-server-node

http-server-node This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2021-23797 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSUR...

gin-vulnerable

gin-vulnerable Demo consumer pinned to github.com/gin-gonic/gin v1.7.0 vulnerable to CVE-2023-29401. The /download/:filename handler passes user input directly to Context.FileAttachment — the exploit-condition pattern Endor flags as exploitable...

chrome-vuln-scanner

Chrome Vulnerability Scanner A lightweight, dependency-free defensive tool that checks the installed Google Chrome version against known vulnerabilities and produces an easy-to-understand visual HTML report. Alat pertahanan ringan untuk memeriksa versi Google Chrome terhadap kerentanan yang...

CVE-2026-78679

A flaw was found in GitPython. A remote attacker with low privileges can exploit a vulnerability in the TagReference.create function, where a positional reference parameter bypasses a security guard. This allows the attacker to supply a specially crafted reference value, such as --file=, to read...

CVE-2026-64846

A flaw was found in Nix. A malicious derivation, when executed with the recursive-nix experimental feature enabled, can exploit a time-of-check/time-of-use TOCTOU race condition in the final symlink handling of the LocalStore restore path. This allows the Nix process or nix-daemon to create or...