CVE-2025-51859

CVE-2025-51859 Vulnerability description Chaindesk, a web application for constructing AI Agents, is vulnerable to Stored Cross-Site Scripting XSS in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the...

log4j-checker

Log4j-Checker This repository contains scripts that can help identity .jar files which may be vulnerable to CVE-2021-44228 aka Log4Shell. Log4Shell Hash Check This script will find .jar files within the filesystem starting from a specific path, calculate a SHA-256 hash for each .jar file found -...

cve-2022-29464

cve-2022-29464 cve-2022-29464 Batch Script Referenced the exploit by MzzdToT master, wrote a cve-2022-29464 batch detection script python3 rce.py -f file.txt...

CVE-2025-32463_chwoot

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. This vulnerability is reported by Rich Mirch @0xm1rch on X @ Stratascale. Original post: Vulnerability...

pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. May be patched at June Disclaimer This project is only used for researching. Make sure you get authorized before you use it. Not allowed for illegal use. It is not allowed to...

CVE-2025-51863

CVE-2025-51863 Vulnerability description ChatGPTUtil is a AI-powered chatbot assistant, providing access to both ChatGPT and an AI image generator. A Self Cross-Site Scripting Self-XSS vulnerability exists in the chat component. This can lead to cookie theft leading to remote account hijacking...

CVE-2025-9074-PoC

Docker API RCE sin autenticación CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux que se ejecutan localmente se conecten a la API del motor Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientemente...

CVE-2021-26258

This repo contains tools and supplementary files for CVE-2021-26258 PoC. See the blogpost for details of the vuln. List of files : rn.stg.original: original .stg file that comes with Intel Killer rn.xml.original: .xml file extracted from rn.stg.original by using rnstg-tool rncustom.xml: custom .x...

CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ OpenSSH...

SSH_Enum_CVE-2018-15473

SSH Username Enumeration Exploit This script is a modified version of an original exploit that allows enumeration of SSH users on vulnerable servers OpenSSH 2.3 7.7. Functionality The script uses a vulnerability in the SSH protocol to enumerate valid users on the target server. It can enumerate...

CVE-2024-6387

OpenSSH CVE Scanner The OpenSSH CVE Scanner is a Python script designed to scan multiple SSH targets for vulnerabilities based on their OpenSSH version. It utilizes threading for concurrent scanning and integrates logging with colored output for enhanced visibility. Features Multi-threaded...

Security update for multipath-tools

This update for multipath-tools fixes the following issues: Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. Path traversal in device-mapper-multipath failedwwids management bsc1277210. SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows bsc127721...

CVE-2020-1350-DoS

CVE-2020-1350 SIGRed - Windows DNS DoS Exploit Credits for the bug are entirely down to Check Point Research @cpresearch who did an incredible writeup of this bug props to @sagitz for the post Their writeup can be found here. This exploit was written by @maxpl0it Quick summary of how it works: 1...

CVE-2017-9841

phpunit-shell ⭐ a simple python3 script to exploit CVE-2017-9841. the exploit - CVE-2017-9841 ❗ simple script that exploits a remote code execution vulnerability found in PHPUnit before 4.8.28 and 5.x before 5.6.3. makes a post request to the target with user input system commands...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 - Implementación en Python de la vulnerabilidad Zero Logon Descripción Un script en Python que utiliza la librería Impacket para probar la vulnerabilidad CVE-2020-1472 - Zerologon créditos a la investigación de Secura. El fallo se origina en el Protocolo remoto Netlogo...

CVE-2024-46987

CVE-2024-46987 - Camaleon CMS Authenticated Arbitrary File Read This repository contains a Proof of Concept PoC script for CVE-2024-46987 , which allows for arbitrary file reading LFI / Path Traversal on Camaleon CMS. Description A Path Traversal vulnerability has been identified in Camaleon CMS...

cve-2015-1538-1

PLEASE DO NOT SHARE THIS WITH ANYONE. THIS CODE IS BEING PROVIDED TO YOU UNDER FrienNDA. PEOPLE VIOLATING THIS WILL NO LONGER BE CONSIDERED FRIENDS. Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most...

CVE-2025-24813

CVE-2025-24813 Análisis sencillo de reproducción de CVE-2025-24813 y un script de explotación simple root@kitploit: usage: CVE-2025-24813.py -h -u URL -d DATA CVE-2025-24813 argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u URL, --url URL URL -d DATA, --data DATA...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS Privilege Escalation This repository contains a Python script that automates the exploitation of the CVE-2025-2304 privilege escalation vulnerability in Camaleon CMS. It has been tested on version 2.9.0. Usage root@kitploit: python exp.py http://target.exmaple user...

CVE-2023-44812

CVE-2023-44812 A reflected cross-site scripting XSS vulnerability in the adminredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal admin's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: adminredirecturl Exploit -...