The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

CVE-2024-1071-PoC-Script

CVE-2024-1071 Exploit Script 🚀 🌟 Disclaimer This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

magicRecon

MagicRecon: Fast, simple and effective MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats. With Magic Recon you...

CVE-2023-21036

Acropalypse detection and sanitization tools You can use the python script acropalypsedetection.py or the yara rule acropalypsedetection.yar to detect cropped images affected by acropalypse: root@kitploit: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done...

CVE-2026-98137

The Linux kernel contains a vulnerability in the ntfs file system where a failed zeroing operation could be silently ignored. Specifically, the ntfs_dio_zero_range() function returns a negative errno or zero from blkdev_issue_zeroout() , but the zeroing failure check in ntfs_attr_fallocate() fail...

CVE-2026-98125

The Linux kernel contains a vulnerability in the smb/client component where smb3_insert_range() and smb3_collapse_range() may return stale data . The issue occurs because truncate_pagecache_range() only partially zeroes boundary pages when the offset or old EOF is not page-aligned , leaving them ...

CVE-2026-98124

The Linux kernel contains a vulnerability in the smb/client component where specific server-side range operations—smb3_zero_range() , smb3_punch_hole() , smb3_insert_range() , and smb3_collapse_range() —fail to properly invalidate the FS-Cache . While these operations discard the affected page ca...

ghauri

Like Ghauri, consider supporting the developer...

Phirautee

Phirautee A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. This tool steals the information, holds an organisation’s data to hostage for payments or...

CVE-2024-1071-SQL-Injection

Proof of concept CVE-2024-1071: WordPress Vulnerability Exploited Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all...

Keylogger

Inputs To Mail. Get Keyboard,Mouse,ScreenShot,Microphone Inputs and Send to your Mail. Purpose of the project is testing the security of information systems INSTALLATION You don't need to do anything for installation just run the script USAGE •Create an account on "https://mailtrap.io/" using a...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

CVE-2026-98078

The Linux kernel contains a vulnerability in the ipvs component related to incorrect sequence option serialization. The hton_seq() function expects host-order source and network-order destination arguments, but the version 1 sync sender passes these arguments in reverse. This flaw leaves 24 bytes...

CVE-2026-98071

The Linux kernel contains a data race in the net/rds component within the rds_conn_path_reset() function. The vulnerability stems from the use of a plain store (cp->cp_flags = 0) to wipe the flag word, while other accessors use atomic bitops concurrently. This race condition can cause updates ...

CVE-2026-98067

The Linux kernel 's erofs filesystem was found to have a broken optimization where LZ4 rolling decompression could compromise data correctness. This occurred because the upstream LZ4 implementation might copy long literals backward on x86 systems, violating the rolling window assumption. To ensur...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

CVE-2026-97945

The Linux kernel contains a vulnerability in x86 memory management where PMD-mapped Huge Transparent Pages (THP) can experience data loss. The root cause is that pmd_modify() incorrectly masks out the hardware dirty bit (_PAGE_DIRTY). This causes the kernel to lose the dirty state of a page when ...