watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Detection Artifact Generator for Dell UnityVSA CVE-2025-36604 https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023 See our blog post for technical details Detection in Action root@kitploit: python...

copyfail-guard

CopyFail Guard root@kitploit: / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / // / / / / // / // / // / / / // / // ./, // ,/// /,/,// ,/ // // Fast, auditable Linux exposure assessment and mitigation for CVE-2026-31431 “Copy Fail” while kernels get...

CVE-2025-55182-Exploiter

🛡️ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit 🔥 Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities — especially CVE-2025-55182 RSC Deserialization RCE. ✅...

CVE-2026-25177

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-49060-Lab

CVE-2026-49060 - Hippoo Mobile App for WooCommerce Incorrect Privilege Assignment / Privilege Escalation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-49060, an Incorrect Privilege Assignment vulnerability affecting the WordPress plugin Hipp...

CVE-2026-42530

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...

CVE-2026-9082

🚨 CVE-2026-9082 : SQL Injection Vulnerability in Drupal Core High-Impact SQL Injection Vulnerability in Drupal Core PostgreSQL 📋 Overview CVE-2026-9082 is a SQL Injection vulnerability in Drupal Core’s database abstraction layer. It affects only sites using PostgreSQL as the database backend. The...

Multiple vulnerabilities impacts AIX due to cURL libcurl

IBM SECURITY ADVISORY First Issued: Mon Sep 21 04:38:42 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory12.asc Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Buffer Overflow in Seattle Lab Mail SLmail 5.5 - POP3 Simple STACK BAsed BUffer Overflow Step By Step 1 FUZZ The Application In the very First Step we will Fuzz The Application With a Simple Spike Script meanwhile we wil also have SLmail attachedand running to immunity Debugg...

CVE-2018-1133-Exploit

CVE-2018-1133-Exploit This repository contains a python exploit script for the Moodle Evil Teacher exploit CVE-2018-1133. Usage root@kitploit: usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and exit -u URL, --url UR...

APT-Hunter V4.0

APT-Hunter Threat hunting for Windows event logs, built with a purple-team mindset. APT-Hunter is a threat hunting tool for Windows event logs. It uses pre-defined detection rules and log statistics to surface APT activity hidden in large volumes of events, cutting the time needed to uncover...

CVE-2023-4220

Chamilo CVE-2023-4220 Exploit The CVE-2023-4220 vulnerability is a file upload vulnerability affecting Chamilo versions = 1.11.24. This vulnerability allows an attacker to achieve remote command execution by uploading a webshell via the path /main/inc/lib/javascript/bigupload/inc/bigUpload.php,...

CVE-2026-94139 Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection

A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...

CVE-2026-94139

A command injection vulnerability exists in the Cookie Handler component of the Chengdu Feiyuxing Technology Feiyu Star Router (version B-MB5E202-210322-r11656 ). Manipulation of the session_id argument in the file /send_order.cgi?parameter=loginout allows remote attackers to execute arbitrary co...

CVE-2026-94139 Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection

A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...

EUVD-2026-83832

A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...

CVE-2026-94138

A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /sendorder.cgi?parameter=delexpmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. T...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424：1Panel Client Certificate Bypass RCE Vulnerability All-in-One Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operation and maintenance panel that provides a graphical interface for deploying websites, managing servers, and running...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...