6404 matches found
Proxylogon-exploit
Proxylogon-exploit proxylogon exploit - CVE-2021-26857 usage: root@kitploit: python exploit.py...
cve-2021-29627
CVE-2021-29627 Some code to trigger the bug incl. macsetfd spray. Need some spray target, though...
xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
Summary Document.createProcessingInstruction in @xmldom/xmldom performs no validation on the target parameter. The requireWellFormed: true serializer option validates only for : in the target and a case-insensitive xml prefix, but does not check for characters. A in the target breaks the processi...
EUVD-2026-69239
xmldom: Processing Instruction Target Injection Bypasses requireWellFormed...
EUVD-2026-69648
joi: object.rename with a template target can set the validated object's prototype...
NPM: joi: object().rename() with a template target can set the validated object's prototype
NPM: joi: object.rename with a template target can set the validated object's prototype vulnerability discovered by ? in WordPress Npm joi versions = 16.0.0, 17.13.5...
joi: object().rename() with a template target can set the validated object's prototype
Impact Applications are affected only if a schema renames keys with a regular-expression source and a Joi.expression / Joi.x target that interpolates the pattern's own match data, combined with multiple: true , for example .rename/^x-.+$/, Joi.x'1', multiple: true . Because the target is rendered...
CVE-2020-5902-POC
CVE-2020-5902-POC Batch detection of CVE-2020-5902 python3 CVE-2020-5902.py infile.txt...
wp-CVE-2017-5487-exploit
WordPress CVE-2017-5487 Exploit in Python Usage Examples: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...
Next.js-Proof-of-Concept
Next.js CVE Proof of Concept This repository contains reproducible proof-of-concept environments for three Next.js vulnerabilities. Each PoC includes a vulnerable target, a fixed target, and a script that demonstrates the behavioral difference between the two. The goal of this project is to make...
CVE-2024-29973
One day, I saw this Repositories about CVE-2024-29973 .But after my testing, the script can be executed but it doesn't work. So I made a slight change and it can be used very smoothly! Thanks for it! https://github.com/bigb0x/CVE-2024-29973 To scan a single target: python CVE-2024-29973.py -u...
CVE-2025-5349-Scanner
Escáner de Vulnerabilidades CVE-2025-5349 Uso root@kitploit: python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...
CVE-2026-9082-PoC
python3 poc.py https://target.com...
CVE-2026-69839
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
CVE-2013-6117
CVE-2013-6117 root@kitploit: $ ./CVE-2013-6117 -h Options: -h, --help display help information -f, --filename File containing list of IP addresses -t, --target Target IP -n, --threads No of concurrent threads default: 100 root@kitploit: $ ./CVE-2013-6117 -f hostfile.txt...
CVE-2022-27925
CVE-2022-27925 Setup root@kitploit: git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 Usage root@kitploit: usage: CVE-2022-2925.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0....
EUVD-2026-73060
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
CVE-2026-69839
CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...
Hardware-Vulnerability-with-Proof-of-Concept-
🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability Research An in-depth research paper and hands-on Proof-of-Concept PoC exploring speculative execution attacks on modern CPUs. 📖 Overview This project is a research and lab-based exploration of Spectre Variant 2 CVE-2017-5715 , also known...
