Sangfor-CVE-2025-12916

Sangfor-CVE-2025-12916 Sangfor CVE-2025-12916 Remote Command Execution Vulnerability Batch Detection Tool || Author: Jinxia Security Sangfor OSM Vulnerability Batch Detection Tool A batch detection tool for the CVE-2025-12916 remote command execution vulnerability in Sangfor Operation and...

CVE-2019-9978

CVE-2019-9978 – Proof of Concept PoC Functional PoC for vulnerability CVE-2019-9978 , affecting the plugin Social Warfare = 3.5.2, allowing Remote Code Execution RCE in WordPress. 📌 Description This exploit abuses the swpdebug=loadoptions parameter to force the loading of a remote payload, allowi...

osquery-defense-kit

osquery-defense-kit osquery queries for Detection & Incident Response, containing 250+ production-ready queries. ODK osquery-defense-kit is unique in that the queries are designed to be used as part of a production detection & response pipeline. The detection queries are formulated to return zero...

CVE-2020-17530-s2-061

CVE-2020-17530-s2-061 s2-061 graphical interface exploit, only for fun and practice Usage root@kitploit: python CVE-2020-17530.py Fill in target address Fill in the system command to execute Click Execute PS: The exploit includes a reverse shell function, but I was too lazy to add the correspondi...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

Important: Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

An update for sg3utils is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

CVE-2026-94185

nvm resolves a requested version or alias by treating it as a filename under $NVMDIR/alias. Before 0.40.8, nvmalias concatenated the requested name onto that directory and read the result with no containment check, so a name containing a .. component escaped the alias directory; under the default...

Erlang-OTP-PoC_CVE-2025-32433

Erlang/OTP SSH Pre-Authentication Channel Confusion 📺 Proof of Concept Video Description: A demonstration of the Erlang/OTP SSH Pre-Authentication Channel Confusion vulnerability. Click here to watch the full demo on YouTube Abstract What is this PoC about? This Proof of Concept demonstrates...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397 - Js2Py Sandbox Escape Payload Generator This script generates a JavaScript payload that can be evaluated by Js2Py in vulnerable environments where Python internals are exposed through object wrappers. Usage Basic command execution: root@kitploit: python3 cve-2024-28397.py -c "id"...

NachoVPN

NachoVPN 🌮🔒 NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server. It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by the community. It currently supports various popular corporate VPN...

CVE-2026-32194

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

cve-2026-8697

CVE-2026-8697: Login Rate Limit Bypass on TP-Link Archer C64 CVE-2026-8697 is a logic flaw in the TP-Link Archer C64's OS called TPOS in the debug message. It lets any unprivileged user connected to the router to bypass the web UI rate limit by using a residual SSH service. A simple Python script...

CVE-2026-45447

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

MAL-2026-16302 Malicious code in @nimbusedge2/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e0720671ede37963c7328b0434ac8e2fe6c52dd252678f81da390e9554c0ba @nimbusedge2/auth 1.1.1 ships a 333-byte package whose package.json preinstall lifecycle hook runs bash -i with stdio redirected to...

Malicious code in @nimbusedge2/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e0720671ede37963c7328b0434ac8e2fe6c52dd252678f81da390e9554c0ba @nimbusedge2/auth 1.1.1 ships a 333-byte package whose package.json preinstall lifecycle hook runs bash -i with stdio redirected to...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — Unauthenticated SQLi to Root RCE Severity: Critical Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module Tested On: FreePBX on CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Overview An unauthenticated SQL injection...

dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...