toolkit

English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...

CVE-2019-19652

CVE-2019-19652 Chevereto downgrade attack - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. An admin user can instruct the updater script to downgrade to another version instead of upgrade, reintroducing previous flaws. Due to the lack of a CSRF token this attack can also be used in a CSRF attack, meaning an...

Log4j-Updater

Log4j Updater With the inevitable need to update the famous Java framework called Log4j, numerous companies are needing to update Log4j on several computers at the same time, which takes time and cost, and that's where the Log4j Updater comes in. log4jupdater.sh is a simple bash script with the a...

CVE-2026-57239

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. Build Just build the binary, drop it on your target and run it. root@kitploit: cargo build --release Usage Th...

CVE-2026-12518

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...

CVE-2026-12518 Local privilege escalation in the Logi Options+ updater service on Windows

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...

EUVD-2026-77318

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...

CVE-2026-12518

CVE-2026-12518 is a local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows . A low-privileged local user can exploit this flaw to execute arbitrary code with SYSTEM privileges, resulting in high impact to confidentiality, integrity, and availability (CVS...

PcanExploit

CVE-2024-44610: PEAK PCAN-Ethernet Gateway FD DR Authenticated Root Exploit What is it? This repository contains a Proof-of-Concept PoC exploit that executed code as root on Peak Ethernet gateways. It requires that you know the credentials to the web interface. How to fix it? The vendor has rapid...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Affected Software: Notepad++ versions prior to 8.8.9 using the WinGUp updater. Vulnerability Type: Update integrity verification bypass leading to arbitrary code execution. Description: The WinGUp updater fails to properly verify the integrity of update metadata, allowing an attacker who can...

CVE-2026-87509

Incorrect authorization in Updater in Google Chrome on on Windows prio...

CVE-2026-87457

Race condition in Updater in Google Chrome on on Windows prior to 153...

CVE-2026-87467

Race condition in Updater in Google Chrome on on Windows prior to 153...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

CVE-2023-7261

CVE-2023-7261 Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability Details: This vulnerability allows local attackers to escalate privileges on affected installations of Google Chrome. An attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2026-87467

A flaw was found in the Updater component of Chromium. A local attacker could exploit a race condition to potentially execute arbitrary code outside of the sandbox environment. This could lead to a complete compromise of the affected system...

DEBIAN-CVE-2026-87509

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-87509

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-87457

A flaw was found in the Updater component of Google Chrome. A local attacker could exploit a race condition to execute arbitrary code outside of the browser's security sandbox by using a local program. This could lead to a complete compromise of the affected system...

CVE-2026-87467

Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...