WordPress Site Editor <=1.1.1 - Local File Inclusion

WordPress Site Editor through 1.1.1 allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php. id: CVE-2018-7422 info: name: WordPress Site Editor =1.1.1 - Local File Inclusion author: LuskaBol,0x240x23elu...

wordpress-skelersecurity-core-security-CVE-2026-63030

SkelerSecurity Core Security Plugin إجراء تخفيفي مركّز ومؤقت للوصول غير الموثق إلى نقطة نهاية REST Batch API في نواة ووردبريس. نظرة عامة SkelerSecurity Core Security Plugin يتطلب مصادقة قبل أن يعالج ووردبريس الطلبات الموجهة إلى مسار REST Batch API في النواة: /wp-json/batch/v1 /?restroute=/batch/v...

Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities

استغلال-و-تخفيف-CVE-2020-0796-SMBGhost-و-Print-Spooler-ثغرات يحتوي هذا المستودع على توثيق مفصل ورمز يتعلق باستغلال واكتشاف وتخفيف ثغرتين مهمتين: CVE-2020-0796 SMBGhost وثغرات Print Spooler. يُظهر المستودع كيف تم تحديد هذه الثغرات واستغلالها في بيئة افتراضية باستخدام VirtualBox، والخطوات اللاحقة...

CVE-2026-8838-Mitigation-and-Detection

CVE-2026-8838 Proof of Concept and Mitigation This project demonstrates the exploitation and mitigation of CVE-2026-8838 , a Remote Code Execution RCE vulnerability affecting the amazon-redshift-python-driver prior to 2.1.14. The project consists of: Client Application Mock Redshift Server Attack...

CVE-2026-8388-Mitigation-and-Detection

CVE-2026-8388-Mitigation-and-Detection...

log4noshell

Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...

CVE-2021-44228

CVE-2021-44228 Apache Log4j هي أداة تسجيل مكتوبة بـ Java. تركز هذه الورقة على ما هو Log4j وثغرة log4shell وكيف تعمل، وكيف تؤثر على الضحية، وكيف يمكن التخفيف منها. قم بتنزيل PDF واستمتع !!! تحياتنا !!!...

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527 Microsoft Print Spooler सेवा को सिस्टम से अक्षम करने के लिए सरल बैच स्क्रिप्ट चलाएँ 1. कमांड प्रॉम्प्ट को उन्नत विशेषाधिकारों के साथ खोलें, सेवा को अक्षम करने के लिए प्रशासनिक विशेषाधिकार आवश्यक हैं। 2. स्क्रिप्ट चलाएँ root@kitploit:...

fix-cve-2013-2094

CVE-2013-2094 Mitigation Fix This script provides an easy mechnism for generating portable SystemTap modules that can be loaded with systemtap-runtime to mitigate the vulnerability described in CVE-2013-2094. This toolset is aimed towards RHEL6, but will likely work without modification on other...

PowerShell-PrintNightmare

PowerShell-PrintNightmare A collection of scripts to help set the appropriate registry keys for CVE-2021-34527 shared as part of our blogs outlining various mitigation options. servers.ps1 contains the registry settings related to PointAndPrint. You still need to install the patch! workstations.p...

cve-2019-17240

Bludit = 3.9.22 - Bruteforce Mitigation Bypass This is small project where I rewrite this python script into golang. Purpose of this project was to learn Golang and understand how this exploit work. Usage root@kitploit: $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of...

log4j-cve-code-search-resources

Using code search to help fix/mitigate log4j CVE-2021-44228 and log4j CVE-2021-45046...

cve-2017-8529

cve-2017-8529 ملفات CVE-2017-8529 الخاصة بي سكربت PowerShell لتكوين إصلاح السجل في CVE-2017-8529...

Ivanti-Connect-Around-Scan

Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker Overview Features Types of Checks WEB ACCESS SYSTEM INFO BYPASS DETECTED Status Types Explanation Getting Started Requirements Usage Arguments Target Specification Custom Variables Output Stylization To Do...

CVE-2021-1675

CVE-2021-1675 CVE-2021-1675: ZERO-DAY VULNERABILITY IN WINDOWS PRINTER SERVICE WITH AN EXPLOIT AVAILABLE IN ALL OPERATING SYSTEM VERSIONS Let me provide a onf the method I found in order to mitigate that waitting for MS release a official patches. Run as Administrator in Windows Powershell Note:...

anti-jndi

anti-jndi आम वेब सर्वरों का उपयोग करके हाल की CVE-2021-44228 Log4Shell भेद्यता के दुरुपयोग के खिलाफ मज़ेदार चीज़ें। @shipilev की पोस्ट https://gist.github.com/shipilev/92e709a868f3d328b6636e1bfc21cf09 के आधार पर मैंने उनके उदाहरण को Apache2 पर पोर्ट किया। एक सहकर्मी ने इसे Lighttpd के लिए किया।...

Yellowkey-mitigation

Yellowkey-mitigation.ps1 is a PowerShell script that automates the WinRE mitigation workflow described in CVE-2026-45585, adds verification after every step, and does not execute step 6 reagentc /disable + reagentc /enable if any earlier step fails. It also checks whether the required registry...

Orchestrated-Powershell-for-CVE-2023-24932

Secure Boot Orchestrator CVE-2023-24932 Automates the full Secure Boot mitigation for CVE-2023-24932 BlackLotus. Handles all registry changes, reboots, and verification automatically. Requirements Windows 10/11 or Server 2016+ Administrator privileges Secure Boot enabled Cumulative Update = July...

cve-2013-3900-winverifytrust-mitigation

CVE-2013-3900 Mitigation WinVerifyTrust / EnableCertPaddingCheck This repository contains a PowerShell remediation + verification script that addresses Tenable/Nessus finding: Plugin ID: 166555 Name: WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation EnableCertPaddingCheck The script...

CVE-2026-49329

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-'...