learning-management-system

learning-management-system Masteriyo - LMS para WordPress = 1.6.7 - Exposición de Información Sensible Información del Plugin root@kitploit: Tipo de Software Plugin Slug del Software learning-management-system ver en wordpress.org ¿Parcheado? Sí Remediación Actualizar a la versión 1.6.8, o a una...

CVE-2026-7867-disk2root

Filesystem.Mount → as-user Spoofing → Authorization Bypass → Root-context Mount → LPE Overview CVE-2026-7867 is a local privilege escalation vulnerability in udisks2 involving the Filesystem.Mount D-Bus method, the as-user option, fstab-managed mount flows...

WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username. id: CVE-2019-9880 info: name: WPEngine WPGraphQL 0.2.3 -...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Jira - Incorrect Authorization

Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. id: CVE-2019-3403...

ETQ Reliance - Authentication Bypass via Trailing Space

An authentication bypass vulnerability exists in ETQ Reliance on the CG legacy platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login pag...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Delete Any User Severity: High | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Table of Contents Overview Vulnerability Details Impact Affected Version Attack Scenario Proof of Concept Steps to Reproduce...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS root@kitploit: Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version...

dnsprobe

注意 - 该项目已停止维护。新的更新和修复将推送到 dnsx。 DNSProbe 是一个基于 retryabledns 构建的工具，允许你使用用户提供的解析器列表执行多个选择的 DNS 查询。 资源 资源 功能 用法 安装说明 从源码安装 在 Docker 容器中运行 查询主机的 A 记录 查询主机的 CNAME 记录 查询 Subfinder 输出的 CNAME 记录 许可证 功能 简单便捷的 DNS 记录查询工具。 用法 root@kitploit: dnsprobe -h 这将显示工具的帮助信息。以下是所有支持的选项。 安装说明 从源码安装 dnsprobe 需要 go1.13+...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2026-31431

Description: Cfail 是我用 C++ 和 x86-64 汇编语言实现的 CVE-2026-31431（又名 Copyfail），完全无需任何依赖，包括 libc。实际上，通过最小化实现标准库，您可以得到一个通用的可执行文件，能够在每个 Linux x86-64 发行版上独立运行。这使得该程序成为“一次编译，到处部署”的类型，其中“到处”指的是任何存在漏洞的随机 Linux x86-64 发行版。 以非特权用户在存在漏洞的系统上运行该程序，将打开一个 root shell。 makefile 还会创建一个名为 cfail.sh 的“引导” shell...

smtp_userenum

smtpuserenum 帮助： root@kitploit: python3 smtpuserenum.py -h 用法： root@kitploit: python3 smtpuserenum.py 你可以更改用户名列表：...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Escalada de Privilegios Local del Kernel de Linux LPE Vulnerabilidad de escalada de privilegios local que afecta al cliente CIFS/SMB del kernel de Linux. 📖 Resumen CVE-2026-46243 es una vulnerabilidad de escalada de privilegios local LPE dentro del cliente CIFS/SMB de...

twint

TWINT - Twitter Intelligence Tool No authentication. No API. No limits. Twint is an advanced Twitter scraping tool written in Python that allows for scraping Tweets from Twitter profiles without using Twitter's API. Twint utilizes Twitter's search operators to let you scrape Tweets from specific...

CVE-2026-81754

The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Referencia Directa Insegura a Objetos con UUIDv1 Predecible Código del Programa Python Flask root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM 生成 GPS 基带信号数据流，这些数据流可以使用软件定义无线电（SDR）平台转换为射频信号，例如 ADALM-Pluto、bladeRF、HackRF 和 USRP。 Windows 构建说明 1. 启动 Visual Studio。 2. 创建一个空的控制台应用程序项目。 3. 在右侧的解决方案资源管理器中，将 "gpssim.c" 和 "getopt.c" 添加到源文件文件夹。 4. 在解决方案配置下拉列表中选择 "Release"。 5. 生成解决方案。 使用 GCC 构建 root@kitploit: $ gcc gpssim.c...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...