4078 matches found
BPFDoor-controller-source
BPFDoor-controller-source Source code to recent BPFDoor's controller variant Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py Compile: root@kitploit: $ apt install libssl-dev $ gcc...
C0deVari4nt
C0deVari4nt Description C0deVari4nt is a variant analysis and visualisation tool that inspects codebases for similar vulnerabilities. It leverages CodeQL, a semantic code analysis engine, to query code based on user-controlled CodeQL query templates and passes the results to our client interface...
public-research
Nokia Deepfield ERT — public research Threat research from the Nokia Deepfield Emergency Response Team ERT, focused on DDoS botnets and related infrastructure. Each directory covers a botnet family with a brief summary and machine-readable indicators of compromise IoCs. This repo consolidates pri...
codeql-buffer-overflow-variant
codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...
CVE-2021-40444--CABless
CVE-2021-40444--CABless version Update: Modified code so that we don´t need to rely on CAB archives the file "index.html" that triggers payload execution will contain 1 line of code only, inside 'script' tag: An article in PDF format is provided. Update: link to video demo -...
DEBIAN-CVE-2026-80933
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during...
AgentTesla-Config-Extractor
AgentTesla-Config-Extractor Extractor de configuración para AgentTesla - Variante Discord/Telegram Uso agenttesla-config-extractor.py -f Ejemplo de Salida Ejemplo de Hashes root@kitploit: 0de25252f312735c0a26f7ac7a27cc8a51bfcdd900fc2e8d0a8b65013988e7e9...
rails-activestorage-vips-audit
rails-activestorage-vips-audit Una Agent Skill que audita repositorios Ruby on Rails para detectar exposición a CVE-2026-66066 KindaRails2Shell — la vulnerabilidad de procesamiento de variantes libvips de Active Storage que permite la lectura arbitraria de archivos y, en una aplicación Rails, la...
miasma-toolkit
Miasma / Shai-Hulud toolkit Incident analysis + detection/remediation tooling for the Miasma worm a Mini Shai-Hulud variant that injects auto-run payloads into AI-agent / IDE configs and npm/GitHub repos. ⚠️ Disclaimer — no warranty. This is a community defensive toolkit provided "as is" , without...
CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-
CVE-2026-21012 – Rust serde Deserialización de Enum No Confiable Inyección de Variantes Código del Programa Rust root@kitploit: // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction...
CVE-2025-12758
CVE-2025-12758: Bypass del Selector de Variación Unicode en isLength de Validator.js ID de CVE: CVE-2025-12758 Puntuación CVSS: 8.7 ALTA Severidad: ALTA CWE: CWE-792 Filtrado incompleto de una o más instancias de elementos especiales Publicado: 26 de noviembre de 2025 Divulgado: 19 de octubre de...
CVE-2026-31431
PoC Python for Copy Fail CVE-2026-31431 Python use nosplice variant...
Chrome-CVE-2024-2887-RCE-POC
Chrome-CVE-2024-2887-RCE-Poc概述 漏洞名称：Google Chrome Type Confusion 威胁类型：代码执行 利用可能性：高 POC状态：已公开 在野利用状态：未公开 EXP状态：已公开 技术细节状态：已公开 This can be considered a variant bug of CVE-2024-2887 discovered by Manfred Paul and presented in Vancouver 2024. 注明 Poc和Exp均来自互联网，仅供交流学习使用，请在虚拟机内测试 Pwned by Seunghyun Lee...
ssbd-tools
Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...
DEBIAN-CVE-2026-19872
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages,...
Hardware-Vulnerability-with-Proof-of-Concept-
🛡️ Spectre 变种 2（CVE-2017-5715）——硬件漏洞研究 一份深入的研究论文和动手概念验证（PoC），探索现代 CPU 上的推测执行攻击。 📖 概述 本项目是一项基于研究和实验的探索，针对 Spectre 变种 2（CVE-2017-5715） ，也称为 分支目标注入（Branch Target Injection） ——一种影响具备推测执行和分支预测功能的 CPU 的硬件级侧信道漏洞。 本项目的目标是： 理解 Spectre 变种 2 的 微架构根本原因 在隔离的虚拟实验室中复现一个可运行的 概念验证（PoC） 通过 缓存定时侧信道分析 分析和验证泄露的数据...
CVE-2026-40453
Case-Variant Camel Header Injection Reproducer CVE-2026-40453 This project demonstrates CVE-2026-40453 — an incomplete fix for CVE-2025-27636. The 2025 fix added setLowerCasetrue to HttpHeaderFilterStrategy so that case-variant header names e.g. CAmelExecCommandExecutable are filtered alongside t...
CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE
🚨 CVE‑2025‑53770 – SharePoint Zero-Day Variant Exploited for Full RCE A Critical Escalation from CVE‑2025‑49706 By Aditya Bhatt – Red Team | VAPT 📌 TL;DR CVE‑2025‑53770 is a critical CVSS 9.8 zero-auth RCE vulnerability in Microsoft SharePoint now actively exploited in the wild. This isn’t a...
CVE-2026-76172 vulnerabilities
Vulnerabilities for packages: unleash, arangodb, opensearch-dashboards-fips, langfuse-fips, unleash-proxy, opensearch-dashboards, gitlab-rails-ce, vitess, keep-fips, wazuh-dashboard-fips, unleash-fips, wazuh-dashboard, tileserver-gl, yaml-language-server, langfuse, tensorflow-gpu-jupyter,...