EUVD-2026-84860

e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails urlfor in PaginatorComponent and controller navigation links, allowing attackers to redirect pagination and navigation controls to attacker-controlled origins. Attackers can supply host, protocol, and port query...

EUVD-2026-84823

wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration from .weblate, .weblate.ini, or weblate.ini can select the API URL while an unscoped API token is supplied through WLCKEY or --key without a matching WLCURL or --url. When wlc run...

CVE-2026-62364

The wlc Weblate command-line client is vulnerable to unauthorized API token disclosure in versions prior to 2.0.1 . If an unscoped API token is provided via WLC_KEY or --key without an explicit WLC_URL or --url, the application may automatically use a project-configured URL from files like .webla...

privaxy

Privaxy Next generation tracker and advertisement blocker About Privaxy is a MITM HTTPs proxy that sits in between HTTPs talking applications, such as a web browser and HTTP servers, such as those serving websites. By establishing a two-way tunnel between both ends, Privaxy is able to block netwo...

exploit-CVE-2022-25765

Exploit for CVE-2022-25765 pdfkit - Command Injection Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

waymore

关于 - v8.9 waymore 的设计理念是从 Wayback Machine（以及更多来源）中挖掘出比现有工具更多的链接。 👉 waymore 与其他工具的最大区别在于，它还能够 下载存档的响应数据 （来自 Wayback Machine 和 URLScan），以便你可以从中搜索更多链接、开发者注释、额外参数等。 👉 此外，其他工具目前无法处理来源现行的速率限制，常常在结果不完整时就停止运行，并且不会告知你结果不完整。 任何做过漏洞赏金的人很可能都用过 @TomNomNoms 开发的出色的 waybackurls 工具。该工具从 web.archive.org 获取 URL，并从...

Apkatshu

Apkatshu Apkatshu its a Tool for extracting urls , emails , ip address , and interesting data from APK files root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for...

CVE-2018-11776

Vulnerable docker container for CVE-2018-11776 root@kitploit: docker pull bhdresh/cve-2018-11776:1.0 docker run -dit -p :8080:8080 bhdresh/cve-2018-11776:1.0 PoC PoC - 1 root@kitploit: Request : http://:8080/struts2-showcase-2.3.14/$333+333/help.action Result :...

CVE-2017-16568

CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

CVE-2022-22947

CVE-2022-22947 Usage: root@kitploit: python3 CVE-2022-22947.py url...

ReconCat

Recon Cat ========================================= Introduction A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose. This...

Firebase-Extractor

Firebase-Extractor //Mobile OSINT// This tool is written in python2, the purpose of this tool is to parse all the results from Bing search.Basically whenever a firebaseio URL is found for an app , User instead of searching for sensitive data by going manually through the search results can use th...

CVE-2018-11776-Python-PoC

CVE-2018-11776-Python-PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python test and PoC for CVE-2018-11776, originally appearing on; https://github.com/hook-s3c/CVE-2018-11776-Python-PoC What's going on? Man Yue Mo from Semmle has disclosed an Struts2 RCE vulnerability, delivered ...

uro

uro 在安全测试中使用URL列表可能会很痛苦，因为有很多URL包含无趣/重复的内容；uro 旨在解决这个问题。 它不对URL进行任何HTTP请求，并移除： 递增的URL，例如 /page/1/ 和 /page/2/ 博客文章及类似的人工编写内容，例如 /posts/a-brief-history-of-time 路径相同但参数值不同的URL，例如 /page.php?id=1 和 /page.php?id=2 图片、js、css 以及其他“无用”文件 安装 推荐通过以下方式安装 uro： root@kitploit: pipx install uro 注意：如果你使用的是旧版...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2026-89277

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-77246

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, an HTTP transport deployment with READONLYMODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including...

CVE-2026-76194

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

CVE-2026-75698

Adobe Connect is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user...