PT-2026-86527

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli query of the file Front-end/university.php of the component Search Handler. The manipulation of the argument book name/book author results in sql injection. The attack may be performed from...

PT-2026-86532

A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

PT-2026-86578

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable in the '/pages/sup del.php?type=supplier' endpoint. SQL injection is a technique where an attacker...

CVE-2026-33017-Exploit

Fireflow RCE Exploit Remote Code Execution for Langflow via the buildpublictmp endpoint. Exploit via Public Flow Build Endpoint that executes a reverse shell on the target. Requirements Python 3.8+ httpx library Install: root@kitploit: pip install httpx Usage root@kitploit: python exploit.py -u -...

Talks

Talks Slides of my public talks...

CVE-2023-5070

creationtimestamp| type| source ---|---|--- 2026-09-05 18:00:05+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY 2026-09-06 00:00:39+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY...

security-operations-labs

Security Operations Labs Overview This repository consolidates defensive security work from a university context in a form reworked for public traceability. The focus is on methodology, reproducible labs, validation, and the limitations of the measures developed—not on publishing course material...

CVE-2020-15492

CVE-2020-15492 This vulnerablity was discovered and disclosed by me. This repository will hold the advisory, exploits and the setup executable of the vulnerable software for one to experiment with this vulnerability. This repository is only for educational purposes. Links Advisory SYSS-2020-028...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the path traversal vulnerability in the python AioHTTP library = 3.9.1 make sure to find a valid public facing directory such as "/static/" or "/assets/" Once you find it, go in main.py and replace the /static/ string with the one you found...

CVE-2022-36804-ReverseShell

Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...

cve-2026-23989-opencloud-lab

CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale public-link scope bypass A self-contained, one-command lab that reproduces CVE-2026-23989 and proves it fixed, using the official upstream Docker images. A public share link that is supposed to grant access to one folder can be abused to read...

WordPress The Events Calendar plugin < 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure vulnerability

Contributor+ Non-Public Event, Venue and Organizer Content Disclosure vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin The Events Calendar versions 6.17.3.1...

CVE-2026-84745

The The Events Calendar WordPress plugin (versions before 6.17.3.1 ) fails to restrict non-public content in its public REST archives, allowing users with a contributor or higher role to read the full contents of every unpublished event, venue, and organizer record on the site, including those be...

Blockchain-Security-Audit-List

Blockchain Security Audit List A list of Blockchain Security audit companies, solo auditors and where to find all their public audits. Table of contents Blockchain Security Audit List Audit Companies Solo Auditors Contributing Audit Companies...

exploits

Public Proof-of-Concept Exploits Repository This repository contains public proof-of-concept PoC exploits for various vulnerabilities that I have discovered over time. These PoC exploits are shared for educational purposes and to demonstrate the potential risks associated with the vulnerabilities...

BLACKHAT_Asia2023

BLACKHATAsia2023 Just About BLACKHAT USA2022 PDF Public File List, Search what your intersting. root@kitploit: BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

CVE-2026-85701

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/init.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be...

EUVD-2026-71754

A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the...

Exploits

Windows Exploits A curated archive of complied and tested public Windows exploits...

CVE-2026-85638

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...