CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

CVE-2025-24799

CVE-2025-24799 - GLPI SQL 注入漏洞利用工具 用于 GLPI 中未经身份验证的 SQL 注入漏洞的利用工具。 漏洞信息 字段| 值 ---|--- CVE| CVE-2025-24799, CVE-2025-24801 产品| GLPI（资产管理软件） 类型| 未经身份验证的 SQL 注入 漏洞点| /index.php/ajax/ 端点 受影响函数| 带 deviceid 参数的 handleAgent 受影响版本| = 3.6 requests == 2.31.0 安装依赖 root@kitploit: pip install -r...

hazel-cve-2026-43499

Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...

Zero-Logon-Exploit

ZeroLogon 漏洞利用 一个使用 Impacket 库来利用 Zerologon（CVE-2020-1472）漏洞的 Python 脚本。 该脚本尝试执行 Netlogon 身份验证绕过。目前该脚本会将密码更改为空值。 当域控制器已打补丁时，检测脚本会在发送 2000 对 RPC 调用后放弃，并判定目标不存在漏洞 （误报率为 0.04%）。 安装 安装步骤如下： root@kitploit: apt install python3-venv python3 -m venv impacketEnv source impacketEnv/bin/activate git clone...

CVE-2024-38063

CVE-2024-38063 Research – Windows IPv6 Kernel Remote Code Execution 1. Project Overview This repository contains our research and analysis of CVE-2024-38063 , a critical vulnerability in the Windows TCP/IP stack. CVE stands for Common Vulnerabilities and Exposures. It is a standardized dictionary...

CVE-2025-8110

CVE-2025-8110 — Traversal de enlaces simbólicos en Gogs → RCE Resumen CVE-2025-8110 es una vulnerabilidad crítica en Gogs servicio Git autoalojado versiones = 0.13.3. La API PutContents valida las rutas de archivo contra el recorrido de directorios ../ pero no resuelve los enlaces simbólicos ante...

log4shell-coraza

Log4Shell Security Lab — nginx + Coraza WAF 教育/防御目的 ：此实验室包含故意存在漏洞的应用程序（Log4j 2.14.1）和JNDI利用工具包，仅 用于学习如何在隔离环境中检测和拦截Log4Shell。请勿部署到互联网，请勿用于攻击不属于您的系统。 使用集成了Coraza WAF（动态模块）+ OWASP CRS v4 + 自定义JNDI规则的nginx进行Log4Shell（CVE-2021-44228）防御实践实验室。附带存在漏洞的Spring Boot目标容器、攻击者box Kali，以及Suricata + Wazuh用于观察。 1...

CVE-2025-55182-Next.js-RCE

🔍 Next.js 安全测试工具 专为 Next.js 应用设计的专业安全评估工具 ⚠️ 免责声明 本工具仅供授权安全测试和研究用途。 ✅ 仅用于你拥有或获得明确测试许可的系统 ✅ 用于授权范围内的漏洞赏金计划 ✅ 用于安全研究人员和渗透测试人员 ❌ 切勿对未授权的系统使用 ❌ 不得用于任何恶意或非法活动 使用本软件即表示您同意遵守所有适用的法律法规。 📖 概述 该工具为安全专业人员提供了一个图形界面，用于测试 Next.js 应用是否受 CVE-2025-55182 影响。帮助企业识别其 React Server Components RSC 实现中的潜在安全问题。 什么是...

GitPython-Exploit-CVE-2022-24439

GitPython-Exploit Practical Pentest...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156 的 root shell PoC（无需暴力破解） 仅供教育目的等使用。 已在 Ubuntu 20.04 上针对 sudo 1.8.31 测试通过 所有研究功劳归：Qualys 研究团队 请查看他们博客上的详细信息。 你可以用以下命令检查你的 sudo 版本是否存在漏洞：$ sudoedit -s Y。 如果它要求你输入密码，那么很可能存在漏洞；如果它打印用法信息，则不存在漏洞。 出于测试目的，你可以在 Ubuntu 20.04 上使用 $ sudo apt install sudo=1.8.31-1ubuntu1 降级到存在漏洞的版...

CVE-2014-4725

CVE-2014-4725 this script is used to scan and exploit cve-2014-4725 vulnerability mailpoet/wysija newsletters in wordpress. features scan mode detect wordpress targets vulnerable to cve-2014-4725 exploit mode upload a zip payload to vulnerable targets installation 1. clone the repository:...

Interpreter-HackTheBox

Interpreter — HackTheBox 平台： HackTheBox 操作系统： Linux 状态：已退役 — 完整演练已发布。 完整演练： l3dsec.com/walkthroughs/interpreter-htb 攻击链 root@kitploit: Nmap → Mirth Connect 4.4.0 80/443 → CVE-2023-43208 未认证 Java 反序列化 RCE → 以 mirth 身份获取 Shell → mirth.properties → MySQL 凭据 → MySQL → sedric PBKDF2 哈希 → hashcat → SSH...

CVE-2026-85706-gitlab-poc

CVE-2026-85706 描述 GitLab CE/EE 未认证任意文件读取漏洞（CVE-2026-85706）。 受影响版本： GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 已修复版本： GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2 漏洞详情 该漏洞存在于 GitLab 的 Workhorse 组件中。Workhorse 的正则表达式看到的是编码后的路径，而 Puma 会对其进行解码。Rails 的...

CVE-2026-90599

A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file includes/process.php. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The explo...

CVE-2026-90597

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90598

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90600 itsourcecode Sales and Inventory System inv_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

CVE-2026-90600 itsourcecode Sales and Inventory System inv_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

CVE-2026-90600

itsourcecode Sales and Inventory System 1.0 is vulnerable to SQL injection in the file /pages/inv_edit1.php via manipulation of the ID argument. The attack can be initiated remotely and requires low privileges (authentication). A proof-of-concept exploit has been publicly disclosed and may be use...

Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service

CVE-2021-44228 Servicio de prueba Spring Boot Este es un hack sucio de un proyecto hello world de Spring Boot para probar tus herramientas/payloads/capacidades de detección localmente antes de lanzarlos contra objetivos en producción. La versión de Log4j configurada es la 2.13.0 Construyendo la...