EUVD-2026-66417

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. In versions 1.2.1-beta.1 through 1.3.1-beta.2 , the PR Branch Checker workflow in .github/workflows/pr_checker.yml interpolates untrusted values (github.head_ref and github.event.pull_request.head.repo.full_name) directly into a shell gh pr comm...

EUVD-2026-67859

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2021-3156-Project

CVE-2021-3156 — Baron Samedit Estouro de buffer baseado em heap no sudo → Escalonamento local de privilégios Departamento de Cibersegurança ITSOLERA | Estágio Red Team 2026 root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ███╗ ██╗ ███████╗ █████╗ ███╗ ███╗███████╗██████╗ ██╗████████╗...

CVE-2019-10392_EXP

CVE-2019-10392EXP RCE autenticata di Jenkins Git Client CVE-2019-10392Exp Utilizzo root@kitploit: usage: Jenkins Git Client 2.8.2. -h -u TARGET -U USERNAME -P PASSWORD -i ITEM -I INTERACTIVE -c COMMAND optional arguments: -h, --help show this help message and exit -u TARGET, --target TARGET Targe...

CVE-2026-64561

CVE-2026-64561 Dona Supporta la manutenzione di questo progetto con PayPal o scansionando il codice QR qui sotto. ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di...

CVE-2019-11043-Vulnerability

Colaboradores: Olaf Madejski, Andrew Masone, Nate Desany Demonstração de Exploração e Persistência com Túnel Reverso em PHP-FPM CVE-2019-11043 — Vulnerabilidade no Tratamento de Caminho do PHP-FPM da Debian Visão Geral do Projeto Em outubro de 2019, os pesquisadores do Debian Security Advisory Em...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Exploit di bypass dell'autenticazione di Microsoft SharePoint Server Critico CVSS 9.8 — Escalation di privilegi non autenticata ad Amministratore Farm in Microsoft SharePoint Server Indice Panoramica Dettagli della vulnerabilità Versioni interessate Diagrammi di architettura...

CVE-2026-34980

cve-id Dona Supporta la manutenzione di questo progetto con PayPal o scansionando il codice QR qui sotto. ⚡ Uso Semplice Usa questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Configurazioni di laboratorio isolate Ambienti di test di...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – Replay dei telecomandi CCSDS senza numero di sequenza Codice del programma simulatore satellite Python root@kitploit: satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself,...

CVE-2025-8110

CVE-2025-8110 – PoC RCE per Gogs ≤ 0.13.3 Proof-of-Concept per CVE-2025-8110 , una scrittura arbitraria di file autenticata in Gogs ≤ 0.13.3 causata da una gestione impropria dei link simbolici nell'API PutContents. Un utente autenticato può eseguire il commit di un symlink che punta a .git/confi...

PoC-CVE-2026-9198

Descrizione Codice exploit proof of concept per CVE-2026-9198 Utilizzo python3 poc.py -u -c...

ForgottenButNotGone

Dimenticati ma non scomparsi Questo repository contiene script proof-of-concept per le vulnerabilità presentate al talk "Dimenticati ma non scomparsi: RCE non autenticati e LPE in servizi Linux legacy" del Black Hat USA 2026 e del DEF CON 34. CVE-2026-28372 Escalation locale dei privilegi in...

Zimbra-CVE-2026-73570-Rules

Wazuh-Regeln CVE-2026-73570 Zimbra OS Command Injection Erkennungsregeln für CVE-2026-73570 , eine OS-Command-Injection in der Zimbra Collaboration Suite über den SNMP-Trap-Benachrichtigungsparameter snmpnotify. Schwachstelle...

CVE-2025-49113-PoC

CVE-2025-49113 Roundcube RCE PoC 🚀 كيفية تشغيل المشروع 1. تشغيل الخادم الضعيف root@kitploit: cd Stand docker-compose up -d 2. تشغيل السكربت ضد الهدف root@kitploit: cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test --command "id" 📌 المتطلبات الأساسية...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Lettura Arbitraria di File in Rails Active Storage/libvips → Furto di SECRETKEYBASE → RCE Panoramica CVE-2026-66066 è una catena di gravità critica CVSS 9.5 che combina la lettura arbitraria di file in pre-autenticazione con l'esecuzione remota di codice in Ruby ...

CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation

CVE-2026-21019 – Ausgesetzte Ausführung eines Kubernetes-CronJob durch Zeitmanipulation Programmcode YAML + Python-Exploit root@kitploit: cronjobvuln.yaml - CronJob that checks current time without external validation apiVersion: batch/v1 kind: CronJob metadata: name: backup spec: schedule: "0 2 ...