ssh_user_enum

sshenumv0.3.py Uso: sshenumv0.3.py opciones Opciones: root@kitploit: -h, --help Muestra este mensaje de ayuda y sale -u --userlist Especifica un archivo de nombres de usuario delimitado por nuevas líneas -i --ip Especifica el objetivo -m --multiplier Especifica el multiplicador de la contraseña...

CVE-2023-32629

CVE-2023-32629 — Escalada de privilegios local total en OverlayFS Escalada de privilegios local en OverlayFS: análisis completo hasta la escalada total Solo con fines educativos y de investigación de seguridad autorizada. Gravedad: Alta Tipo: Escalada de privilegios local LPE Afectados: kernels d...

EUVD-2026-75723

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

CVE-2026-9327

CVE-2026-9327 affects IBM WebSphere Application Server versions 9.0 (9.0.0.0–9.0.5.28) and 8.5 (8.5.0.0–8.5.5.30). The vulnerability is an improper privilege management flaw (CWE-269) that allows an authenticated user with a low-privilege administrative role to modify security configuration, pote...

CVE-2026-9327 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in information disclosure or denial of service...

EUVD-2026-75733

IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in information disclosure or denial of service...

CVE-2026-89089

A SQL injection vulnerability in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_USER ) to exploit the DATE_FORMAT parameter in two shipped JasperReports ("Maintenance contracts expired" and "Maintenance contracts strategy") via the reporting REST API (POST /rest/rep...

CVE-2025-53640

CVE-2025-53640 – Enumeración de Usuarios Autenticados en Indico de CERN Vulnerabilidad BOLA PoC y análisis técnico de CVE-2025-53640: una vulnerabilidad de Autorización a Nivel de Objeto Rota BOLA en Indico permite la enumeración de usuarios autenticados a través de un endpoint, exponiendo nombre...

CVE-2024-21413-Moniker-Link-Writeup

CVE-2024-21413 – Análisis de la Vulnerabilidad Moniker Link Este repositorio contiene un análisis técnico de CVE-2024-21413 , una vulnerabilidad relacionada con el manejo de Moniker Links en Microsoft Outlook que permite a los atacantes eludir la Vista Protegida y filtrar credenciales NTLMv2...

CVE-2023-49543

CVE-2023-49543 Book Store Management System v1.0 - Control de Acceso Incorrecto Descripción : El control de acceso incorrecto en Book Store Management System v1 permite a los atacantes acceder a páginas no autorizadas y ejecutar funciones administrativas sin autenticarse. Versión del producto...

DEBIAN-CVE-2026-88035

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...

CVE-2025-32463

CVE-2025-32463: Sudo Privilege Escalation chroot Este repositorio contiene información y/o una prueba de concepto PoC sobre la vulnerabilidad CVE-2025-32463 , un fallo crítico de escalada de privilegios locales en la utilidad sudo. 📌 Descripción La vulnerabilidad permite a un usuario local obtene...

usernamer

usernamer usernamer es una herramienta de pruebas de penetración para generar una lista de posibles nombres de usuario/inicios de sesión para un nombre determinado ej.: John Doe Doeson para enumeración de usuarios o fuerza bruta. Esta herramienta también admite archivos de texto con un nombre por...

DEBIAN-CVE-2026-88031

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifie...

CVE-2026-88028

Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can...

CVE-2026-15417

In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - Escalada de Privilegios No Autenticada Este es un script de Python que explota la vulnerabilidad CVE-2024-6624 en el plugin JSON API User = 3.9.3 para WordPress. Esta herramienta permite a atacantes no autenticados registrar nuevos usuarios y escalar sus...

EUVD-2026-75670

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifi...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 This is a modified version of a POC for proxylogon. Instead of laucnhing "whoami" it creates a new user and adds that user to the administrator group and creates a reverse shell. The origonal POC code can be found here: https://www.exploit-db.com/exploits/49663 Usage: python...

EUVD-2026-75667

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifie...