PX4-Autopilot

The autopilot stack the industry builds on. About PX4 is an open-source autopilot stack for drones and unmanned vehicles. It supports multirotors, fixed-wing, VTOL, rovers, and many more experimental platforms from racing quads to industrial survey aircraft. It runs on NuttX, Linux, and macOS...

CVE-2026-39842

CVE-2026-39842: ثغرة حقن التعبيرات في محرك القواعد بـ OpenRemote تؤدي إلى تنفيذ أوامر عن بُعد TL;DR ثغرة حرجة في تنفيذ الأوامر عن بُعد في محرك القواعد بـ OpenRemote تسمح للمستخدمين المصادق عليهم الحاصلين على دور write:rules بتنفيذ أكواد عشوائية على الخادم بصلاحيات الجذر root. درجة CVSS : 10.0 حرج...

CVE-2026-68398

CVE-2026-68398: Ubuntu PPPoL2TP use-after-free to local root This repository contains a build-specific local privilege-escalation exploit for CVE-2026-68398 , a use-after-free race between PPPoL2TP receive processing and destruction of an unattached PPP channel. It was validated in QEMU against t...

BadBizness-CVE-2023-51467

BadBizness Automatic exploitation script for the Java web framework OF Biz under CVE-2023-51467. Inspired by the HackTheBox machine Bizness. Usage and Example This script requires the tool ysoserial and OpenJDK version 11. See usage menu for installation. Setup a listener to catch the shell with...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 is a critical vulnerability CVSS 9.8 in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the FontMatrix object within PDF files. CVE-2024-4367 Exploit Wizard: User Guide CVE IDENTIFIER| CVE-2024-4367 ---|--- SEVERITY|...

CVE-2025-55182-React2Shell

React2Shell React2Shell is a proof-of-concept PoC exploit demonstrating a CRITICAL remote code execution RCE vulnerability in modern web frameworks using React Server Components RSC. This PoC targets CVE-2025-55182 , a CVSS 10.0 vulnerability that allows to execute arbitrary system commands via...

CVE-2026-36981-Kernel-EoP-PoC

CVE-2026-36981-Kernel-EoP-PoC Kernel write-what-where condition within the pwdrvio.sys kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primitive that can be leveraged toward privilege escalation. 2026-02-09 Vendor notified 2026-03-05 Vendor acknowledged 2026-03-...

CVE-2026-1056-POC

CVE-2026-1056-POC Snow Monkey Forms - Unauthenticated Arbitrary File Deletion PoC This repository contains a Proof of Concept PoC for a critical vulnerability in the Snow Monkey Forms WordPress plugin versions = 12.0.3. The vulnerability allows an unauthenticated attacker to delete arbitrary file...

opencode-secure

The open source AI coding agent. Installation root@kitploit: YOLO curl -fsSL https://opencode.ai/install | bash Package managers npm i -g opencode-ai@latest or bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS and Linux...

CVE-2023-22527

CVE-2023-22527 Atlassian Confluence - Remote Code Execution CVE-2023-22527 Poc root@kitploit: POST /template/aui/text-inline.vm HTTP/1.1 Host: localhost:8090 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/119.0.6045.159 Safari/537.36 Content-Type:...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E الوصف ثغرة حقن القوالب في الإصدارات الأقدم من Confluence Data Center وServer تسمح لمهاجم غير مصادق بتحقيق تنفيذ التعليمات البرمجية عن بُعد RCE على المثيل المتأثر. يجب على العملاء الذين يستخدمون إصدارًا متأثرًا اتخاذ إجراء فوري. معظم الإصدارات المدعومة الحديثة م...

CVE-2026-25050

CVE-2026-25050 – Authentication Timing Attack This repository contains a Proof of Concept demonstrating a timing attack affecting the NativeAuthenticationStrategy.authenticate method. This PoC is provided as a technical demonstration for blog / research purposes. Vulnerability The authentication...

cve-2024-21762-poc

cve-2024-21762-poc CVE-2024-21762 is a critical vulnerability in Fortinet's FortiOS and FortiProxy products, located in their SSL VPN component. This vulnerability allows unauthenticated remote attackers to execute arbitrary code or commands on the target system through specially crafted HTTP...

CVE-2021-40449-NtGdiResetDC-UAF

CVE-2021-40449-NtGdiResetDC-UAF A POC for CVE-2021-40449. Only tested on 1809, the code is a bit rough, but it's a good experience for me. Instead of using the ThreadName method, user-space memory allocation is used...

cpanel-cve-2026-41940-ioc

Scanner IOC CVE-2026-41940 Script de détection pour la contournement d'authentification cPanel/WHM CVE-2026-41940 affectant toutes les versions de cPanel après la 11.40. Il s'agit d'une réécriture du script de détection cPanel en amont avec des corrections pour les faux positifs et une corrélatio...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation CVE-2025-21298 delivered via a malicious RTF attachment. Investigation of the alert from LetsDefend On 4 February...

struts_cve-2024-53677

إثبات المفهوم إعداد بيئة الاختبار root@kitploit: » git clone [email protected]:0xPThree/strutscve-2024-53677.git » cd strutscve-2024-53677 » sudo docker build --ulimit nofile=122880:122880 -m 3G -t struts-6.3.0.1 . » sudo docker run -p 8081:8080 --ulimit nofile=122880:122880 -m 3G --rm -it...

CVE-2026-1529

CVE-2026-1529 Keycloak Exploit Tool CVE-2026-1529 : Keycloak - Unauthorized organization registration via improper invitation token validation ⚠️ WARNING : This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. 📋 Table of...

rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

LeakGauge

LeakGauge هذا هو مستودع الكود الخاص بورقتنا البحثية: The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges. نسخة arXiv ورابط الورقة: https://arxiv.org/abs/2608.17829 ينفّذ هذا المستودع خط أنابيب LeakGauge لكشف التسرب: إعداد مجموعات البيانات التجريبية، استخراج...