CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

Flowise Password Reset Account Takeover ATO For research and testing purposes only! I am not responsible for any damages to live infrastructure if this tool is not used as intended. Only use on systems you own or have permission to be testing! Usage root@kitploit: usage:...

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 MikroTikのWinboxプロトコルにおける認証なしのパストラバーサルにより、/flash/rw/store/user.datから管理者認証情報が漏洩します。 📑 目次 概要 影響を受けるバージョン 脆弱性 📂 Winboxプロトコル パストラバーサル パスワード復号 開発者バックドア エクスプロイト 参考文献 📋 概要 CVE-2018-14847 は、MikroTik...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment A security assessment of the Beat XP VEGA Smartwatch Firmware RB303ATV006229 focused on Bluetooth Low Energy BLE connectivity revealed a design and implementation weakness that enables a nearby BLE central device to establish and retain...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

CVE-2023-45866_WIP

h0nkbtexploit Samsung devices are vulnerable to a critical Bluetooth security vulnerability that allows an attacker to control the targeted device as if they were attached by a Bluetooth keyboard, performing various functions remotely depending on the endpoint. This vulnerability, tracked as...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 Vulnerability Analysis A cybersecurity project exploring a real-world vulnerability,its potential impact,and how security teams can detect,fix,and verify the issue. Project Overview This project is part of my cybersecurity learning journey. I selected...

CVE-2023-32243-Detection-and-Mitigation-in-WordPress

🔐 CVE-2023-32243 – Detection and Mitigation in WordPress 📘 Project Title: Detection and Mitigation of CVE-2023-32243 in the Essential Addons for Elementor WordPress Plugin 🧠 Abstract This project explores the exploitation and prevention of CVE-2023-32243 , a critical privilege escalation...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE（PoC） WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data 参考 CVE-2024-25600 Bricks Builder 安全公告 Wordfence 分析文章 鸣谢 发现者： Snicco / Calvin Alkan 原始漏洞利用代码： K3ysTr0K3R 清理与简化： Esteban Zárate...

CVE-2026-89054 OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

CVE-2026-89054 OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

EUVD-2026-75707

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

CVE-2026-89054

CVE-2026-89054 is a missing authorization vulnerability in OpenNMS Horizon . The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH , leaving the shipped @PATCH endpoints for event configuration and SNMP data collection accessible withou...

CVE-2023-20198-Exploit

Cisco IOS XE Authentication Bypass CVE-2023-20198 This repository contains a proof-of-concept exploit for CVE-2023-20198 , an authentication bypass vulnerability affecting Cisco IOS XE Web UI. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable Cisco...

PHP-8.1.0-dev_WebShell-RCE

PHP 8.1.0-dev WebShell RCE Unauthenticated Exploit Code for PHP 8.1.0-dev WebShell RCE Unauthenticated Expected outcome: Exploiting backdoor installed on PHP 8.1.0-dev server thereby obtaining WebShell to execute commands remotely. Intended only for educational and testing in corporate...

CVE-2025-12028

1 Start a simple HTTP server to host the proof-of-concept page root@kitploit: mkdir -p /tmp/attacker && cd /tmp/attacker php -S 127.0.0.1:8000 2 Create a file /tmp/attacker/poc.html with the following contents root@kitploit: document.getElementById'x'.submit;...

routers-exploit

OpenSource Repo with PoC's and vulns found in routers TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC CVE-2020-9374 - TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC root@kitploit: Payload: "$ls" TP LINK TL-WR849N - Auth Bypass: Firmware and Configs update TP LINK TL-WR849N - REMOTE COMMAND...

CVE-2025-70849-Podinfo

CVE-2025-70849: Stored XSS in Podinfo Summary A security vulnerability CWE-79 was identified in Podinfo , a web application for demonstrating Kubernetes microservices. The /store feature allows unauthenticated users to upload arbitrary HTML/JS content, leading to Stored XSS. Vulnerability Details...