CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 u...

CVE_2022_38181_Raven

Exploit for CVE-2022-38181 for FireTV 2nd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE202238181. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32bit userspace, as well as the 2nd gen Cube's older Bifrost...

hoh4

Requirements: python Command: python laravel-ignition-rce.py ""...

CVE_2022_46395_Raven

Exploit for CVE-2022-46395 to run on FireTV 2nd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

CVE-2021-3156-centos7

CVE-2021-3156-centos7 Exploit sudo privilege escalation, only for CentOS 7 Affected versions: sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 Log in to the system as a non-root user and run the following command: sudoedit -s / If the output is "not a regular file", it is highly likely that this...

CVE-2023-38743

CVE-2023-38743 ManageEngine ADManager कमांड इंजेक्शन संदर्भ: https://medium.com/@petrusviet/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe https://www.zerodayinitiative.com/advisories/ZDI-23-1488/...

7-Zip.chm-Mitigation

7-Zip.chm-mitigiation 7-Zip Mtigation CVE-2022-29072 Explaination : https://user-images.githubusercontent.com/33525376/163654035-d40ca72a-7dbc-425f-ade2-3820cfababb2.mp4 Author CVE Founder : https://github.com/kagancapar/CVE-2022-29072 A vulnerability has been discovered in 7-zip, the popular...

CVE-2023-3047

Telegram : @ghostmans3c or @Chrome2024 Donate BTC : 17L22i227Keet23QCNaeCyrQ6xfiTQpQJ5 PoC How To Exploit CVE-2023-3047 Description Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection.This issue affects Lockcell:...

webp_Android10_r33_CVE-2023-1999

root@kitploit: / \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Description: WebP codec: library to encode and decode images in WebP format. This package contains the library that can be used in other programs to add WebP support, as well as the command line tools...

CVE-2022-23222-POC

Proof of Concept Exploit Code for CVE-2022-23222 This is a POC for CVE 2022-23222, a Local Privilege Escalation vulnerability. This POC was written for Ubuntu 20.04 with kernel version 5.13.0-27-generic, but other kernel versions are also vulnerable. For a detailed analysis of the exploit, please...

CVE-2017-1000486

CVE-2017-1000486 This is a PoC of CVE-2017-1000486 with some payloads useful to bypass blacklisting lexicographic checks on standard functions used to achieve RCE getClass, exec, etc.. and for retrieving primefaces secret through Padding Oracle in order to be less noisy possible on exploitation...

CVE-2021-41773-apache

CVE-2021-41773 Apache HTTP Server Exploit This repository contains a Python-based proof-of-concept exploit for the Apache HTTP Server path traversal vulnerability identified as CVE-2021-41773. The script is designed for security research, defensive testing, and authorized evaluations of vulnerabl...

external_libcap-Android10_r33_CVE-2023-2603

This is a library for getting and setting POSIX.1e formerly POSIX 6 draft 15 capabilities. This library would not have been possible without the help of root@kitploit: Aleph1, Roland Buresund and Andrew Main, Alexander Kjeldaas. More information on capabilities in the Linux kernel can be found at...

CVE-2025-21385

SSRF Exploit Script This repository contains a script designed to perform an SSRF Server-Side Request Forgery exploit for testing and educational purposes. Use this tool responsibly and only in environments where you have explicit permission. Features Exploit SSRF vulnerabilities in target system...

CVE-2023-45878-POC

CVE-2023-45878-POC CVE-2023-45878 poc for gibbon LMS on xampp windows. Upload a webshell called shell.php for command injection. For reverse shell uploads a powershell reverse shell ps1 script called shell.ps1 which is uploaded to the target machine using the shell.php. Requirments Python3 Reques...

CVE-2023-4634

CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin 3.10 CVE-2023-4634 Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version 3.10. The exploit is not trivial and requires just a little setup explained bellow. Global...

CVE-2024-41110-SCAN

CVE-2024-41110 Docker Security Scanner This tool is designed to check a host for vulnerability related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable versions of Docker and the use of AuthZ plugins, which can potentially lead to security issues. Usage Run the scri...

CVE-2024-6387

Vulnerability Description CVE-2024-6387 exploit targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. Due to calling an async-signal-unsafe function in the SIGALRM handler, this vulnerability allows remote code execution as root. Vulnerability Summary Th...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246: Apache RocketMQ Remote Command Execution Vulnerability Detection Tool Tool Features Simple Usage Run ./apacherocketmqcve202333246scannerlinuxamd64 scan Output: Whether the vulnerability exists: Yes or VulnFound: true indicates the vulnerability exists, and the Versi...