cve-2024-3400

cve-2024-3400 Python exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation root@kitploit: usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploi...

codeql-scanner

drupalgeddon2 The exploit python script for CVE-2018-7600...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

CVE-2020-1472-02-

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

CVE-2020-3580

CVE-2020-3580 Cisco ASA / FTD reflected XSS in the WebVPN SAML SP ACS endpoint /+CSCOE+/saml/sp/acs. Patched in cisco-sa-asaftd-xss-multiple-FCB3vPZe. This repo contains: xss.html — a human-verifiable PoC for authorized targets. src/ — a discovery + scope-aware validation pipeline. docs/ —...

CVE-2025-46181-XSS

CVE-2025-46181 - Reflected XSS in an Online Appointment Booking System CVE-ID : CVE-2025-46181 Discovered by : Shemkumar P shemkumar.github.io Vulnerability Type : Reflected Cross-Site Scripting XSS Severity : Medium Status : Disclosed, CVE Assigned by MITRE ✨ Description A Reflected Cross-Site...

securesystemslib v1.5.1

securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE Description This repository contains a Python-based Proof of Concept PoC for CVE-2024-28397, a sandbox escape vulnerability in the Js2Py JavaScript interpreter for Python. When the target application evaluates untrusted JS code via Js2Py, an attacker can break out of the...

Exploit for CVE-2026-84645

CVE-2026-84645 — Jenkins PersistenceRoot Deserialization RCE...

CVE-2024-44871

MoziloCMS = 3.0.1 Authenticated RCE Description This script is an exploit tool designed for testing web applications running MoziloCMS. It allows an attacker to use admin logins to upload a PHP web shell via jpg file, rename the uploaded file to php, and send system commands to the target through...

CVE-2022-24716

CVE-2022-24716 Exploit for the vulnerability: Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 https://www.sonarsource.com/blog/path-traversal-vulnerabilities-in-icinga-web/ Help: python3 exploit.py -h Usage example: python3 -u http://127.0.0.1:8080 -f /etc/passwd...

testenv

SQL injection test environment A collection of web pages vulnerable to SQL injection flaws and more: conf/ - operating system configuration files used by deployment.sh. dbs/ - standalone databases for some database management systems e.g. Microsoft Access. libs/ - web API libraries to connect to...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Unrestricted Upload of File with Dangerous Type CVSS Score: 8.5 High 📋 Description This tool provides a Proof of Concept PoC for CVE-2025-56399 , a critical vulnerability in alexusmai/laravel-file-manager versions ≤ 3.3.1. The...

CVE-2024-48061

CVE-2024-48061 Langflow vulnerable to remote code execution CVE-2024-48061 poc Usage root@kitploit: python3 poc.py -i -p -l -lp Description This script exploits a vulnerable API endpoint at /api/v1/validate/code on the target web server. It first verifies the presence of the vulnerable path, then...

OESA-2026-3704 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The lengt...

OESA-2026-3703 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e "ASoC: qcom: Add driver support for audioreach solution" cau...

CVE-2024-50335

CVE-2024-50335: Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation Summary The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting XSS, allowing an attacker to inject malicious JavaScript code. This can be...

OESA-2026-3668 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior ...

OESA-2026-3665 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior ...

OESA-2026-3650 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...