CVE-2025-55182

CVE-2025-55182 Vulnerable Application Build and run: root@kitploit: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC from https://github.com/msanft/CVE-2025-55182: root@kitploit: node poc.j...

weblogic_wls_rce_poc-exp

weblogicwls-wsatcomponentdeserialisationrcecve-2017-10271 poc&exp exp solo funciona si la ruta existe puede funcionar para uno o varios ==solo para aprender==...

CVE-2026-89873 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

CVE-2023-41993

CVE-2023-41993 Exploit PoC para CVE-2023-41993. Está escrito solo hasta addrof/fakeobj. La fiabilidad no es muy buena. Si quieres mejorarlo, intenta hacer spray de los IDs de estructura. Versiones afectadas conocidas MacOS 14.0 iOS 17.0, 17.1 beta 1 iPadOS 17.0...

Exploit_CVE-2023-27163

CVE-2023-27163 Código de Exploit PoC Este script de Python es una Prueba de Concepto PoC para CVE-2023-27163 , una vulnerabilidad de Server-Side Request Forgery SSRF en Request Basket. Descripción del Código El script automatiza la explotación de CVE-2023-27163. Realiza las siguientes acciones: 1...

AOSP-ExploitUserDictionary

AOSP-ExploitUserDictionary Exploit PoC para el Content Provider UserDictionary de AOSP CVE-2018-9375 Aviso de seguridad https://ioactive.com/wp-content/uploads/2018/08/IOActive-Security-Advisory-AOSP-UserDictionaryProvider-v1.0.pdf Más información...

CVE-2025-24813-noPoC

CVE-2025-24813-noPoC Después de incontables horas no pude encontrar ningún PoC real. Si bien la deserialización de archivos subidos podría representar una amenaza, todas las cadenas de payload que probé fallaron. Probado en las versiones 9.0.90 y 10.1.15 de Apache Tomcat ¡No hay nada más que ver...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...

CVE-2023-51385P-POC

This repository does not have a README...

CVE-2019-5736-Custom-Runtime

CVE-2019-5736-Custom-Sandbox General CVE-2019-5736 implemented using a shallow, self-written container runtime to understand the exploit. Exploit is based on and almost all copied from the runc-poc by twistlock: https://github.com/twistlock/RunC-CVE-2019-5736/tree/master/maliciousimagePOC Contain...

CVE-2023-23752

CVE-2023-23752 Introduction Open source, Go-based multi-concurrent batch POC detection, high accuracy. Testing 1k entries takes about 40 seconds, with over 90% accuracy. Usage root@kitploit: Generate Linux executable set CGOENABLED=0 set GOOS=linux go build cve-2023-23752-PoC.go Generate Windows...

CVE-2017-5487

CVE-2017-5487 POC of CVE-2017-5487 + tool...

CVE-2022-25012-POC

CVE-2022-25012-POC Improved PoC of CVE-2022-25012...

Treck20-Related

Treck20-Related PoC para CVE-2020-11896: pila TCP/IP Treck e investigación de activos de dispositivos Inspección de la pila de protocolos Como muchos fabricantes adoptan la pila de protocolos Treck, algunos fabricantes se refieren a la pila de protocolos Treck mediante núcleos IP de hardware. No...

CVE-2017-8464

CVE-2017-8464 EXPAMPLE Support x86 and x64 Just for test USB drive POC https://youtu.be/kYj1lAxl3DE...

CVE-2018-16713

CVE-2018-16713 PoC code for CVE-2018-16713. You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/advancedsystemcarefree.php...

CVE-2018-16711

CVE-2018-16711 PoC code for CVE-2018-16711 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/advancedsystemcarefree.php...

jackson-deserialization-2017-7525

jackson-deserialization-2017-7525 Jackson Deserialization CVE-2017-7525 PoC...

Weblogic-CVE-2023-21839

Weblogic-CVE-2023-21839 CVE-2023-21839 A wheel built based on publicly available PoC from the internet Affected Versions 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 Usage java -jar 目标ip:端口 ldap地址 Recommended Tool: https://github.com/WhiteHSBG/JNDIExploit Disclaimer This tool is only for cybersecurity...

CVE-2025-14847

MongoBleed PoC CVE-2025-14847 Ethical Disclosure & Disclaimer This tool is provided for educational purposes only and for use in authorized security auditing. The purpose of this PoC is to help system administrators and security researchers: 1. Verify if a MongoDB instance is vulnerable to...