13166 matches found
byob
Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...
burp-exporter
Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...
CVE-2025-30208
CVE-2025-30208 Using a special raw import query string on a vite dev server, a attacker can read arbitrary files Summary of the CVE Vite dev servers before 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 can bypass the server.fs.deny file access checks for @fs requests. Appending ?raw?? or ?import&raw??...
CVE-2025-1015
CVE-2025-1015: The Thunderbird Address Book contains unsanitized URI fields that could be exploited by attackers. By creating an address book with malicious links, an attacker may trick another user into importing the compromised address book. If the user clicks on the unsanitized link within...
PoC-for-CVE-2021-38540-
CVE-2021-38540 Proof of Concept Missing Authentication on Critical component Known as CVE-2021-38540 About this bug: The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, variables List Variables PoC Source: root@kitploit: POST /variable/varimport HTTP/2 Host...
zig-pe
zig-pe Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory. Features PE Loading Pipeline Parse DOS and NT headers PE32 and PE32+ at runtime Map sections into allocated memory Resolve imports name and ordinal, PE32 4-byte / PE32+ 8-byte thunks Appl...
CVE-2023-40028
CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email for the target Ghost CMS. --password : The password for the target Ghost CMS. --url : The URL of the target Ghost CMS e.g., http://website.com. 1. Login: The script authenticates with the Ghost CMS admin API and retrieves a session...
pycdc-studio
pycdc-studio 中文说明 A Qt Widgets desktop UI for exploring Python bytecode with pycdc / pycdas, inspecting native decompilation results, importing Pyarmor oneshot output, and retrying unsupported code objects with AI fallback. The app supports both Windows and Linux desktop environments. Screenshots...
IronPE
IronPE - Minimal Windows PE manual loader written in Rust. Rust PE Loader / Manual Mapping Implementation IronPE is a minimal Windows PE manual loader written in Rust for both x86 and x64 PE files. This project is a Rust reimplementation of my previous project dotNetPELoader , which implemented a...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
CVE-2014-0472
CVE-2014-0472 Usa root@kitploit: docker-compose up -d Accede a localhost:8083 Referencia: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. Una o más vistas están presentes que construyen una URL basada en la entrada del usuario comúnmente, un parámetro "next" en una cadena de consult...
CVE-2024-25641
CVE-2024-25641 RCE for Cacti 1.2.26 This repository automates the process of exploiting CVE-2024-25641 on Cacti 1.2.26. When a user is authenticated, An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates"...
CVE-2024-25641-CACTI-RCE-1.2.26
CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵 Authenticated RCE Cacti version v1.2.26 Summary An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code ...
CVE-2022-37017
CVE-2022-37017 Authentication bypass for Symantec Endpoint Protection 14.3.5351 Client User Interface Password Symantec Endpoint Protection allows setting a password protection on its UI to prevent configuration changes. This password check in implemented by logic that is neither in a Protected...
Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028
Ghost Arbitrary File Read Exploit CVE-2023-40028 Overview This script exploits a vulnerability in Ghost CMS CVE-2023-40028 to read arbitrary files from the server. By leveraging a symlink in an uploaded ZIP file, an attacker can gain unauthorized access to sensitive files on the system. Features ...
CVE-2026-15953
The ABB Protection and control IED manager (PCM600) is vulnerable to a Path Traversal vulnerability during the project archive import process. This issue specifically affects versions through 2.14 . The vulnerability allows for the improper limitation of a pathname to a restricted directory, pote...
CVE-2026-15953 Path Traversal During Project Archive Import
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...
zap-hud
ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...
cve-search
cve-search cve-search es una herramienta para importar CVE Common Vulnerabilities and Exposures y CPE Common Platform Enumeration en una MongoDB para facilitar la búsqueda y el procesamiento de CVEs. El objetivo principal del software es evitar realizar búsquedas directas y públicas en las bases ...