CVE-2023-32707

CVE-2023-32707 An improved POC exploit based on the reported CVE on exploitdb Exploit Title: Splunk 9.0.5 - Admin Account Takeover CVE: CVE-2023-32707 Overview This script allows for exploiting a vulnerability in Splunk 9.0.5, leading to admin account takeover. The exploit leverages a low-privile...

CVE-2025-32463

CVE-2025-32463 - Sudo Chroot Privilege Escalation Exploit Overview CVE-2025-32463 is a critical local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. This vulnerability allows attackers with sudo privileges to escalate to root access by exploiting a design flaw in the...

Exploit for CVE-2026-76581

CVE-2026-76581 Donate Help maintain this p...

CVE-2022-22029-NFS-Server-

Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 To successfully exploit this vulnerability, an attacker must succeed in a race condition. Making an unauthenticated, carefully constructed call to a Network File System NFS service could be used to exploit this...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress 事前認証反映型XSS → リモートコード実行チェーン DOM Clobbering + アプリケーションパスワード窃取 + REST API プラグイン有効化 = 完全なRCE ⚡ 概要 CVE-2026-64638 は、WordPress の wp-login.php における重大な事前認証型反映XSS です。この脆弱性は、ログインエラーメッセージが送信されたユーザー名を適切なHTMLエンコードなしで 反映するために存在し、 によるDOM Clobberingを可能にして、ほとんどのフィルタを回避します。...

CVE-2026-82635 Pake arbitrary file write via unsanitized download_file filename

Pake before 3.13.1 joins the JavaScript-supplied filename for the downloadfile Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences for example ../Library/LaunchAgents/com.evil.plist or an absolute path resolves outside /Downloads...

CVE-2026-82635

Pake before 3.13.1 is vulnerable to arbitrary file write via its download_file Tauri command. The JavaScript-supplied filename is joined onto the user's Downloads directory without sanitization, so a filename containing path traversal sequences or an absolute path resolves outside ~/Downloads. Th...

CVE-2026-82635 Pake arbitrary file write via unsanitized download_file filename

Pake before 3.13.1 joins the JavaScript-supplied filename for the downloadfile Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences for example ../Library/LaunchAgents/com.evil.plist or an absolute path resolves outside /Downloads...

CVE-2026-82635 Pake arbitrary file write via unsanitized download_file filename

Pake before 3.13.1 joins the JavaScript-supplied filename for the downloadfile Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences for example ../Library/LaunchAgents/com.evil.plist or an absolute path resolves outside /Downloads...

EUVD-2026-68199

Pake before 3.13.1 joins the JavaScript-supplied filename for the downloadfile Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences for example ../Library/LaunchAgents/com.evil.plist or an absolute path resolves outside /Downloads...

watermarks-remover v0.5.0

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

smod

smod smod — это модульный фреймворк, содержащий все виды диагностических и атакующих функций, которые могут понадобиться для пентеста протокола modbus. Это полноценная реализация протокола Modbus с использованием Python и Scapy. Данное ПО может запускаться на Linux/OSX под python 2.7.x. Резюме...

nushell v0.115.0

Nushell A new type of shell. Table of Contents Status Learning About Nu Installation Configuration Philosophy Pipelines Opening files Plugins Goals Officially Supported By Contributing License Status This project has reached a minimum-viable-product level of quality. Many people use it as their...

rebrowser-patches

🪄 Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: root@kitploit: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping|...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Аутентифицированный RCE в Windows Admin Center через WinREST/PowerShell invokeCommand. Использование: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Окружение: root@kitploit: WACBASE - override target base URL default below WACPASS - passwor...

CVE-2025-0690

CVE-2025-0690: Integer Overflow Vulnerability in GRUB2 🛡️ Overview CVE-2025-0690 is a critical integer overflow vulnerability in the GRUB2 boot loader, allowing arbitrary code execution and Secure Boot bypass. This flaw affects systems that rely on GRUB2 for secure boot, exposing the system before...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

nginx-ui CVE Verification Environment This repository is for actually verifying two CVEs reported for nginx-ui Nginx's Web GUI management tool in a Docker environment. CVE-2026-42221 : Unauthenticated administrator account takeover CVE-2026-42238 : Command execution via unauthenticated backup...