CVE-2023-54395

PocketMine-MP versions before 4.12.5 are vulnerable to a denial of service via ModalFormResponsePacket processing. An attacker with low privileges can send numerous oversized JSON payloads in modal form response packets to consume server CPU time , exhausting resources and preventing the server f...

CVE-2023-54395 PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket

PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 Vulnerable Lab This repository provides a vulnerable setup to test nuclei template for CVE-2025-7775. Run root@kitploit: docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app Vulnerability Tests 1. Remote Command Execution RCE root@kitploit: curl -X POST...

CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder 针对 WinRAR 漏洞（CVE-2025-8088）的 POC 利用工具，影响版本为 7.12 及更低版本 🚀 工作原理 1. 创建一个嵌入其他载荷的 Rar 文件 2. 使用多个 ADS 流 🔄 - 以不同的路径遍历深度附加载荷流 3. 操纵 RAR 头 ⚙️ - 修改归档结构以利用路径遍历漏洞 4. 将载荷投放至启动目录 📂 - 解压时尝试将载荷写入 Windows 启动文件夹 🛠️ 使用方法 1. 克隆仓库 root@kitploit: git clone...

RLSA-2026:64796 Important: valkey security, bug fix, and enhancement update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

RLSA-2026:65120 Important: redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

redis security, bug fix, and enhancement update

An update is available for redis. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as a data-structu...

redis:7 security update

An update is available for redis, module.redis. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as ...

RLSA-2026:64824 Important: redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2019-0567-MS-Edge

CVE-2019-0567-MS-Edge POC Una prueba de concepto para MS Edge como ejercicio para aprender explotación de navegadores y migraciones que se presentan en la máquina Windows 10. Todo el código fue creado por Connor McGarr y editado para funcionar en Windows 10 build 15063.483. shell2js.py Mi script...

Log4jTools

Log4jTools Herramientas para investigar Log4j CVE-2021-44228 Explicación de la vulnerabilidad y demo https://www.youtube.com/watch?v=0-abhd-CLwQ FetchPayload.py Obtener payload de Java desde la ruta ldap proporcionada en la búsqueda JNDI. Requisitos: curl sistema, requests python root@kitploit:...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 El Exploit toolkit CVE-2017-0199 es un práctico script de Python que proporciona a pentesters e investigadores de seguridad una forma rápida y eficaz de probar RCE en Microsoft Office. Puede generar un archivo RTF/PPSX malicioso y entregar metasploit / meterpreter /...

modrosnlr5

🧬 modrosnlr5 – Linux Kernel LPE PoC CVE-2026-31431 Proof-of-concept tool designed to validate the exploitation of the CVE-2026-31431 vulnerability on Linux systems. The exploit leverages the kernel's AFALG socket interface to inject a payload and obtain a root shell from an unprivileged user...

WhatsRCE

WhatsRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? root@kitploit: sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRC...

CVE-2018-15982

CVE-2018-15982 Flash sources for CVE-2018-15982 used by NK this is a dump of a fully weaponized activex obj used by NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Payloads are in Class 6 and 7...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 Exploit toolkit CVE-2017-0199 - v2.0 es un práctico script de Python que proporciona una forma rápida y eficaz de explotar Microsoft RTF RCE. Puede generar un archivo RTF malicioso y entregar el payload de metasploit / meterpreter a la víctima sin ninguna...

CVE-2025-55182-exploit

Exploit de CVE-2025-55182 Este repositorio contiene un exploit sencillo para CVE-2025-55182 , una vulnerabilidad crítica de ejecución remota de código en React Server Components. Resumen de la vulnerabilidad CVE-2025-55182 es una vulnerabilidad de ejecución remota de código no autenticada en Reac...

react2shell-lab

Laboratorio de Vulnerabilidades React2Shell Esta es una aplicación Next.js deliberadamente vulnerable para probar CVE-2025-55182 y CVE-2025-66478 RCE de React Server Components. ⚠️ ADVERTENCIA : Esta aplicación es intencionalmente vulnerable. Úsala únicamente en entornos de laboratorio aislados...

CVE-2026-3888-PoC

CVE-2026-3888-PoC compile payload gcc -shared -fPIC -o /tmp/libpayload.so payload.c...

-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858-

-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858- A Proof-of-Concept demonstrating the application of 3D Navier-Stokes CTT formulations to packet flow optimization and defensive bypass. . CTT-NSP: Convergent Time Theory - Network Stack Projection 🌀 Overview CTT-NSP is a...