33119 matches found
langflow-CVE-2026-33017-poc
CVE-2026-33017 — Langflow Unauthenticated RCE PoC For educational and authorized testing purposes only. Summary Langflow = 1.8.1 exposes a public flow build endpoint that accepts attacker-controlled flow data containing arbitrary code. This code is passed to prepareglobalscope in validate.py, whi...
CVE-2024-9326-PoC
CVE-2024-9326 PoC Exploit Script This PoC script is designed to verify the presence of CVE-2024-9326, a high SQL Injection vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates the exploitation process to determine if the target web application is vulnerable, allowing security...
react2shell-exploit
🐺 React2Shell-Exploit-Kensei CVE-2025-55182 - Next.js RCE Remote Code Execution Exploit framework + vulnerable lab + Burp Suite & Nuclei validation. Complete exploitation framework and vulnerable lab environment for security research and penetration testing. root@kitploit:...
Boucle-framework
Boucle Claude Code hooks that actually enforce your rules. 7 standalone hooks, plus enforce-hooks for CLAUDE.md policy, audit tooling, 1,900+ tests, and a searchable Claude Code gaps corpus with severity ratings and workarounds. Quick links: Check your setup · Install hooks · Known limitations ·...
Exploit-Medium-CVE-2021-41184
Exploit-Medium-CVE-2021-41184 Exploit Medium CVE-2021-41184 XSS in the of option of the .position util 1. jQuery ui version v1.12.1 vulnerable 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js ------------------------------------------------Concept...
SOC_287
SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Overview This repository contains a detailed walkthrough of the CVE-2024-24919 vulnerability affecting Check Point Security Gateways. The vulnerability allows arbitrary file read, potentially exposing sensitive system file...
CVE-2026-50522
🛡️ CVE-2026-50522 — Microsoft SharePoint RCE 조사 활발히 악용 중인 치명적인 SharePoint 역직렬화 취약점 작성자: Pratik Chhetri 보고일: 2026-07-27 📌 핵심 요약...
CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...
CVE-2022-26134
Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 in Ruby Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications,...
cve-2025-3248-exploit
CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability Scanner A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248 , a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0. 🔴 Vulnerability Overview CVE-2025-3248: Langfl...
React2Shell-Library
React2Shell Library A curated list of resources regarding CVE-2025-55182 , the critical Remote Code Execution RCE vulnerability in React Server Components known as "React2Shell". Objective: To document the history, mechanics, and remediation of the React2Shell vulnerability for researchers and...
CVE-2025-58434-AND-59528-POC
Flowise Dual CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents Overview Vulnerability Details CVE-2025-58434 — Account Takeover...
SnafflerParser
Snaffler Output File Parser Especially in large environments, the Snaffler output gets very large and time-consuming to analyze. This script parses the Snaffler output file TSV format required and: Beautifies results into readable tables and exports to TXT, CSV, HTML, JSON or PS Gridview. Generat...
next-js-auth-bypass
Hello World - Next.js 12.2 Next.js 12.2의 간단한 개념 증명 애플리케이션입니다. 🚀 빠른 시작 1. 의존성 설치 root@kitploit: npm install 2. 개발 서버 실행 root@kitploit: npm run dev 애플리케이션은 http://localhost:3000에서 확인할 수 있습니다. 🛠️ 사용 가능한 스크립트 npm run dev - 개발 서버 시작 npm run build - 프로덕션 빌드 npm run start - 프로덕션 서버 시작 🎯 기능 ✅ Next.js...
CVE-2020-1938
CVE-2020-1938 Suricata Detection Rule root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo";...
CVE-2025-29927
CVE-2025-29927 Critical - 9.1 Next.js Middleware Bypass Vulnerability Hands-On of CVE-2025-29927 vulnerability in Next.js application where the internal header x-middleware-subrequest can be used to bypass middleware authentication and restricted access. Explained Next.js use an internal header...
CVE-2025-55315-PoC-Exploit
CVE-2025-55315 Pentest Tool HTTP Request Smuggling Exploitation Tool for ASP.NET Core Kestrel ⚠️ LEGAL WARNING THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY! Use ONLY on systems you own or have explicit written authorization to test Unauthorized access to computer systems is ILLEGAL Tool...
CVE-2023-29489
CVE-2023-29489 このセキュリティ脆弱性は、共通脆弱性識別子（CVE）システムに記録されています。具体的には、この脆弱性は一般的なホスティング管理ソフトウェアである cPanel に関連しています。この欠陥により、特別に細工されたリクエストを通じてクロスサイトスクリプティング（XSS）攻撃が可能になります。 CVE-2023-29489 の詳細 この脆弱性により、攻撃者は特別に細工されたリクエストを cPanel インターフェイスに送信することで、ユーザーのブラウザ 💻 で悪意のある JavaScript コードを実行できます。これにより、セッション Cookie などの機密...