CVE-2026-0709

Hikvision Wireless AP – CVE-2026-0709 Authenticated RCE Tool This tool is a Python proof‑of‑concept to test Hikvision wireless access points for CVE‑2026‑0709 , an authenticated command injection vulnerability that can lead to remote code execution on affected devices. For security testing and...

copyfail

Copy Fail - CVE-2026-31431 PoC in C Local privilege escalation exploit for CVE-2026-31431 Copy Fail, written in C. How It Works 1. ELF parsing : resolves /usr/bin/su's entry point virtual address to a file offset via PTLOAD program headers 2. AFALG setup : binds to authencesnhmacsha256,cbcaes wit...

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF via the UPnP MediaRenderer service...

CTT-enhanced-Apache-mod_auth_digest-timing-attack-exploit

CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-Enhanced Apache modauthdigest Timing Attack — CVE-2026-33006 Remote Digest Authentication Bypass → 33-Layer Temporal Timing Attack Original vulnerability: Apache HTTP Server 2.4.66 modauthdigest timing leak CTVSS Original: 4.8 Medium...

CVE-2026-27944

CVE-2026-27944 POC: Descarga de Copia de Seguridad No Autenticada y Acceso al Panel de Nginx UI Este repositorio contiene un Proof of Concept POC mejorado para CVE-2026-27944 , una vulnerabilidad crítica en Nginx UI. La vulnerabilidad permite a un atacante no autenticado descargar copias de...

Sovereign-Echo-33017

Exploit Title: Langflow 1.8.1 - Ejecución Remota de Código RCE No Autenticada Date: 2026-03-21 Exploit Author: Americo N. F. Simoes SimoesCTT Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: = 1.8.1 Tested on: Linux/Fedora 40...

CTT-NFS-Vortex-RCE

CTT-NFS-Vortex-RCE New Physics Disclosure This repository contains a full weaponized exploit for CVE-2026-21509 , targeting the Windows Network File System NFSv4.1 kernel-mode driver nfssvr.sys. CTT-NFS-Vortex-RCE CVE-2026-21509 ⚠️ Technical Advisory: New Physics Disclosure This repository contain...

CTT-MICROSOFT-OFFICE-OLE-MANIFOLD-BYPASS-CVE-2026-21509

🏛️CTT -Microsoft Office OLE Manifold BYPASS CVE-2026-21509 Standardized CTT Implementation for 1096x Temporal Execution ! 📜 Vulnerability Overview CVE-2026-21509 is a critical bypass in the Microsoft Office OLE Object Linking and Embedding validation engine. While standard "laminar" exploits...

CVE-2026-31431-live-code-corruption

CVE-2026-31431 — Live Code Corruption via Page Cache A novel exploitation technique for CVE-2026-31431 "Copy Fail" that corrupts executable code of running processes through the Linux kernel's page cache, achieving root privilege escalation. What's Different All published exploits for this CVE...

CVE-2026-41940-cpanel-0day

Usage root@kitploit: python 0day.py -f test.txt --external-only --show-all -t 10 -o testcvereport.csv Source & reference https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/ PLEASE DO NOT EXPLOIT, ONLY FIX PURPOSES, THI...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation 根据CVE-2021-4034进行了加强，执行Exploit将会默认添加用户名rooter，密码Hello@World，并且rooter用户将具有sudo权限。 Refer to CVE-2021-4034, executing Exploit will add username rooter, password Hello@World by default, and The rooter user will have sudo...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...

CVE-2026-28372-telnetd-Privilege-Escalation

CVE-2026-28372: GNU inetutils telnetd Privilege Escalation Professional Proof-of-Concept PoC for CVE-2026-28372, a Local Privilege Escalation LPE vulnerability found in GNU inetutils telnetd versions ≤ 2.7. Technical Summary The vulnerability occurs because telnetd improperly passes...

CVE-2023-22527

CVE-2023-22527 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE which tested and proven POC in vulnerable instance of confluence data center and servers. By this an attacker can execute arbitary code on vulnerable instance Installation:...

CVE-2026-35570

Breaking Out of the Sandbox: How I Found a Critical Path Traversal Bypass in openclaude CVE-2026-35570 | CVSS 8.4 High | openclaude v0.1.7 Not every vulnerability requires a sophisticated exploit chain. Sometimes a single misplaced return statement is enough to blow a hole straight through your...

pwnkit-exploit

pwnkit CVE-2021-4034 Privilege Escalation exploit sample This repository contains an exploit of CVE-2021-4034, a local privilege escalation in pkexec. This implementation is based on that described in the CVE disclosure, which you should read. If this works on your machine, it means you are...

CVE-2026-29000-pac4j-jwt-auth-bypass

HTB Principal — Writeup de CVE-2026-29000 Aviso legal: Este exploit fue desarrollado únicamente para la máquina retirada "Principal" de HackTheBox. Solo con fines educativos. No lo utilices contra sistemas que no poseas o para los que no tengas permiso explícito de prueba. Información de la máqui...

Dirty-Frag-Kubernetes-PoC

Dirty Frag CVE-2026-43284 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag Linux kernel page-cache corruption vulnerability through shared container image...

CVE-2021-4034-new

CVE-2021-4034 Un día para el exploit de escalada de privilegios de polkit Solo ejecuta make, ./cve-2021-4034 y disfruta de tu shell de root. El aviso original de los autores reales está aquí...

CVE-2023-24329-Exploit

Intro The URL parsing functions focus on splitting a URL string into its components, or on combining URL components into a URL string. urllib.parse.urlparse Simply urllib.parse used for parsing urls, we can bypass it with adding blanks before the url. This happens in python 3.11.4 and before. PoC...