Lucene search
+L

122578 matches found

Kitploit
Kitploit
added 2026/09/16 3:46 a.m.10 views

AppleDOS

AppleDOS CVE-2018-4407 Based on CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, this tweet, and this video. The bug is heap overflow vulnerability in bad packet handling when OS try to send ICMP message containing segments from bad packet back to the sender. This POC will...

8.8CVSS7.9AI score0.22024EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/16 3:46 a.m.8 views

nginx-rift-private-lab

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This fork extends the original PoC with an ASLR-bypass...

9.2CVSS8.5AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/16 3:39 a.m.9 views

CVE-2025-60458

CVE-2025-60458 UxPlay 1.72 RTSP TEARDOWN Double Free Vulnerability Description UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic. A remote attacker can trigger multiple calls to free on the same heap memory object by sending a specially crafted RTSP...

6.5CVSS6.2AI score0.00315EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 3:25 a.m.6 views

mongobleed

mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...

8.7CVSS7.7AI score0.83218EPSS
SaveExploits39References1
Kitploit
Kitploit
added 2026/09/16 3:24 a.m.7 views

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10.11.5 and iOS 9.3.2. The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function...

9.3CVSS7.5AI score0.05599EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/16 3:23 a.m.8 views

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Memory Corruption via SQL Injection A heap-based buffer overflow can occur when calling the undocumented "spreplwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows...

9CVSS6.3AI score0.87036EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/16 3:06 a.m.6 views

cve-2019-0708_bluekeep_rce

Run msfconsole meterpreter/multi/handler listening on 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Edit config, configure callback IP and port 192.168.116.133 6000 4. Execute ./heapspray 192.168.116.134 134 is the XP address, memory = 2G 5. msfconsole meterpreter will get a session ps:...

10CVSS7.9AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
added 2026/09/16 2:56 a.m.7 views

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

8.7CVSS7.8AI score0.83218EPSS
SaveExploits39References3
Chainguard
Chainguard
added 2026/09/16 2:55 a.m.2 views

GHSA-9F4G-F7VV-F9GH vulnerabilities

Vulnerabilities for packages: strongswan...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 2:49 a.m.7 views

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32 bit Down load this version : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe Bypass ASLR, DEP Non Bypass CFG Analysis Team Blog Team Member Blog - mntly Adobe root cause.pdf : Explain...

7.8CVSS7.5AI score0.13191EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/16 2:48 a.m.9 views

CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study This case study is a result of an assignment of ECE 9069: Introduction to Hacking : https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 Overview CVE-2022-0185 is a heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesyst...

8.4CVSS7.5AI score0.25151EPSS
SaveExploits11References5
Kitploit
Kitploit
added 2026/09/16 2:46 a.m.131 views

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 2:34 a.m.6 views

CVE-2021-3156-PATCHER

This simple bash script will patch the recently discovered sudo heap overflow vulnerability. Simply run git clone https://github.com/elbee-cyber/CVE-2021-3156-PATCHER && cd CVE-2021-3156-PATCHER && sh CVE-2021-3156-patcher.sh This patch is significantly important for any nix systems. Neglecting...

7.8CVSS7.3AI score0.99969EPSS
SaveExploits83
Kitploit
Kitploit
added 2026/09/16 2:24 a.m.10 views

heapinfo

HeapInfo As pwn lovers, while playing CTF with heap exploitation, we always need a debugger e.g. gdb for tracking memory layout. But we don't really need gdb if we want to see whether the heap layout same as our imagination or not. Hope this small tool helps us exploit easier ;. Why HeapInfo is...

6.1AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/16 1:53 a.m.8 views

MSTeams---Vulnerability---Remediation

🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...

7.5CVSS8.1AI score0.00784EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 1:53 a.m.6 views

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

8.7CVSS7.8AI score0.83218EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/09/16 1:23 a.m.11 views

writeup_split

Abstract CVE-2024-0684 A vulnerability in the GNU coreutils "split" program allows for a heap buffer overflow with user controlled data. It was introduced in 40bf1591bb4362fa91e501bcec7c2029c5f65a43 on 2023-03-04. A fix has been released with c4c5ed8f4e9cd55a12966d4f520e3a13101637d9 on 2024-01-17...

5.5CVSS6.3AI score0.0049EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 1:17 a.m.8 views

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L root@kitploit: /setintegritylevel CIOI级别将完整性 ACE 显式...

6.1AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 1:13 a.m.5 views

cve-2023-4911-exploit-optimized

Security Notice : This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test. CVE-2023-4911 Exploit Looney Tunables Optimized, multi-processing exploits for CVE-2023-4911 targeting x8664 and...

7.8CVSS7.1AI score0.81422EPSS
SaveExploits28References4
Kitploit
Kitploit
added 2026/09/16 12:54 a.m.7 views

CVE-2025-53367-POC

djvulibremmrexploit This project provides a minimal C++ implementation that triggers a known heap out-of-bounds write vulnerability in DjVuLibre. The code does not weaponize the bug; it only reproduces the faulty execution path so the issue can be inspected and understood. The vulnerability...

8.4CVSS7.6AI score0.00863EPSS
SaveExploits0References2
Rows per page
Query Builder