12743 matches found
qsreplace
qsreplace Acepta URLs desde stdin, reemplaza todos los valores de la cadena de consulta con un valor proporcionado por el usuario, solo genera cada combinación de parámetros de cadena de consulta una vez por host y ruta. Uso Archivo de entrada de ejemplo: root@kitploit: ▶ cat urls.txt...
Citrix SD-WAN Center - Local File Inclusion
Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...
Citrix SD-WAN Center - Remote Command Injection
Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...
bincat
Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...
lst2x64dbg
lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...
redteam-plan
🔥 🚒 Planning a Red Team exercise This document helps inform red team planning by contrasting against the very specific red team style described in Red Teams. This method expresses several biases to optimize for blue team value and enthusiasm. It specifically avoids attempts to motivate by red tea...
frida-ios-hook
Frida iOS hook 📍 Una herramienta que te ayuda a usar Frida fácilmente. Soporta scripts para rastrear clases, funciones y modificar los valores de retorno de métodos en la plataforma iOS. 👉 Para la plataforma Android: frida-android-hook 👉 Para interceptar API cifradas en aplicaciones iOS:...
CVE-2020-0796
CVE-2020-0796 Integer Overflow Vulnerability By inserting a value larger than what can be stored in the OriginalCompressedSegmentSize field, the variable cannot handle this value and unintentionally interprets it as a very small number or a negative value. This can cause unexpected behavior in th...
django-cve-2020-13254
Django CVE-2020-13254 This repository demonstrates exploitation of CVE-2020-13254 in two ways – via a web interface and via a failing test case. For more details visit: https://danpalmer.me/2020-06-07-django-memcache-vulnerability/ Exploiting via the web The example provides a web interface with ...
CVE-2026-97914
In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosujobopen return value A WARNON returns a 0 or 1, not the original negative errno. Just drop the WARNON as the FD open will pass the return code to userspace and there's only one possible source of the erro...
CVE-2026-97914
In the Linux kernel , a vulnerability was identified in the ethosu accelerator component within the ethosu_job_open() function. The issue occurred because a WARN_ON() macro returned a 0 or 1 instead of the original negative error code (errno), potentially leading to incorrect error reporting to u...
CVE-2026-97610
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfsunbufferedwrite If preparation of the first subrequest fails, netfsunbufferedwrite exits its loop before ret is initialized. The empty-iterator check can do the same. For synchronous...
CVE-2026-97610
A vulnerability exists in the Linux kernel netfs component within the netfs_unbuffered_write() function. The issue stems from an uninitialized return value where the function may exit its loop before the ret variable is initialized if the first subrequest fails or during an empty-iterator check. ...
EUVD-2026-86741
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfsunbufferedwrite If preparation of the first subrequest fails, netfsunbufferedwrite exits its loop before ret is initialized. The empty-iterator check can do the same. For synchronous...
CVE-2022-24124
Preface Casdoor is a centralized single sign-on SSO authentication platform based on OAuth 2.0/OIDC ID CVE ID: CVE-2022-24124 CNPD ID: CNPD-202201-7304 Affected Versions Severity: High 7.5 HIGH POC/EXP: Publicly available Casdoor POC:...
CVE-2026-94573
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-94573 Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-94573
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.2.7 . The root cause is insufficient input sanitization and output escaping within the Repeater Field Value. This flaw allows unauthenticated attac...
EUVD-2026-86578
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...