CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...

CVE-2022-0778

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BNmodsqrt of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with poin...

cve-2026-25262-sm8450-research

Research Tools In the course of this work, the public tool edl B. Kerler, V3.62 was used, along with modifications based on it. Experimental testbed: To test the hypothesis of CVE-2026-25262 applicability to the SM8450 platform, an experimental tool cvefinalsingle was created on top of edl. It...

CVE-2001-1442

CVE-2001-1442 ISC INN 2.x - Command-Line Buffer Overflow Exploit-DB publication 1: https://www.exploit-db.com/exploits/20777/ Exploit-DB publication 2: https://www.exploit-db.com/exploits/20778/ Packetstorm publication at https://packetstormsecurity.com/files/24684/defcom.innfeed.txt.html...

synacktiv-rules

synacktiv-rules Public repository of Sigma and YARA/YARA-X rules created by Synacktiv. All rules in this repository should be considered tagged as TLP:CLEAR and PAP:CLEAR. Prerequisites When using a Sigma rule, please make sure that you collect and correctly parse required logs as defined in the...

nextjs-cve-demo

Example: Authorization Bypass in Next.js Middleware CVE-2025-29927 This Repo provides example projects demonstrating the Middleware authorization bypass vulnerability in Next.js CVE-2025-29927. This vulnerability allows unauthorized users to access protected resources. Vulnerability Overview...

rdap

OpenRDAP is a command line RDAP client implementation in Go. https://www.openrdap.org - homepage https://www.openrdap.org/demo - live demo Features Command line RDAP client Output formats: text, JSON, WHOIS style Query types supported: ip domain autnum nameserver entity help url domain-search...

CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js मिडलवेयर बायपास भेद्यता यह रिपॉजिटरी Next.js में CVE-2025-29927 भेद्यता को प्रदर्शित करती है, जहां आंतरिक हेडर x-middleware-subrequest का उपयोग प्रमाणीकरण जैसे मिडलवेयर जांचों को बायपास करने के लिए किया जा सकता है। प्रभावित संस्करण root@kitploit: Next.js 15....

bazad5

bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...

CVE-2025-29927

CVE-2025-29927 ★ CVE-2025-29927 Next.js middleware bypass PoC ★ Description CVE-2025-29927 : Next.js middleware bypass PoC description: Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it i...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Arbitrary File Read http://ryze-t.com/posts/2021/12/15/CVE-2021-43798-Grafana%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.html Usage exp http://example.com /etc/passwd Results...

rootsh

rootsh rootsh is a local privilege escalation targeting OS X Yosemite 10.10.5 build 14F27. It exploits CVE-2016-1758 and CVE-2016-1828, two vulnerabilities in XNU that were patched in OS X El Capitan 10.11.4 and 10.11.5. rootsh will not work on platforms with SMAP enabled. CVE-2016-1758...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

exploit_laravel_cve-2018-15133

Laravel exploit for CVE-2018-15133 This code exploit CVE-2018-15133 and it is based on kosmiz's PoC and Metasploit's exploit for this vulnerability. I pretty much just did this for a box in Hack The Box, because I did not want to use Metasploit at the moment and as a excuse for practicing Python...

dicerosbicornis

DicerosBicornis A stealthy Python based Windows backdoor that uses email as a command and control server. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module pypiwin32 module Features Encrypted transportation messages AES + SHA256 hashing Generate computer unique id...

next-js-auth-bypass

हैलो वर्ल्ड - Next.js 12.2 Next.js 12.2 का एक सरल प्रूफ ऑफ कॉन्सेप्ट एप्लिकेशन। 🚀 त्वरित आरंभ 1. निर्भरताएँ इंस्टॉल करें root@kitploit: npm install 2. डेवलपमेंट सर्वर चलाएँ root@kitploit: npm run dev एप्लिकेशन http://localhost:3000 पर उपलब्ध होगा। 🛠️ उपलब्ध स्क्रिप्ट्स npm run dev - डेवलपमेंट...

CVE-2023-4631

CVE आईडी : CVE-2023-4631 भेद्यता प्रकार : आईपी पता स्पूफिंग विवरण : वर्डप्रेस के लिए DoLogin Security प्लगइन संस्करण 3.6 तक और इसमें शामिल, आईपी पता स्पूफिंग के प्रति संवेदनशील है। यह इस कारण है कि अनुरोध लॉगिंग और लॉगिन प्रतिबंधों के लिए आईपी पता जानकारी कहाँ से प्राप्त की जा रही है, इस पर...

CVE-2023-27100

CVE-2023-27100 - pfSense Anti-brute force protection bypass Problem Description The authentication system attempts to be informative and print extra information along with IP addresses to completely identify where a user logs in from when they login using the GUI. This includes the authentication...

simple-maven

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. kk Docker test root@kitploit: docker-compose up tets Manual Install .NET Core 2.x SDK Microsoft .NET Core SD...

CVE-2025-2995

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint...