ExtendIntel

ExtendIntel This package extends the Intel package to log more fields If the intel file contains the following fields, the data will automatically be added to the intel.log. threatscore verdict verdictsource confidence desc lastseen firstseen url reports campaigns associated category...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...

CVE-2026-79966

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contain an Insertion of Sensitive Information into Log File vulnerability (CWE-532). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . A low-privileged attacker with local access could potentia...

CVE-2026-79966 CWE-532: Insertion of Sensitive Information into Log File

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

EUVD-2026-74895

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

CVE-2026-80169

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

CVE-2026-80169

Dell Secure Connect Gateway (SCG) 5.0 contains an Insertion of Sensitive Information into Log File vulnerability. Affected versions include SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00 . A low-privileged attacker with local access could exploit this to achieve...

EUVD-2026-74892

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

CVE-2024-1302---Badgermeter-moni-tool-Sensitive-information-exposure

CVE-2024-1302 --- Badgermeter moni tool - Sensitive information exposure https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1302: 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CWE-200. Software link :...

CVE-2025-20384

SPLUNK CVE-2025-20384 i dunno, i just read stuff my friendo sent to me and start typing down some random sorry ass nub javascript code Log Injection/Forgery/Poisoning/Obfuscate type POC Please read this arcticle OWASP Log Injection TL;DR Look for static file, passed it and append some random...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - Sensitive Information Exposure via Log File root@kitploit: Description: The Cloud Templates & Patterns collection plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.2 via a l...

CVE-2023-47668

CVE-2023-47668 Description Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin Example of the result root@kitploit: Log file content: 2024-12-24 20:47:19 - wprcpdiscounts table upgrade to 202003311 successful. 2024-12-2...

Log4j_CVE-2021-44228

The Log4j vulnerability, also known as "Log4Shell" or "CVE-2021-44228," is a critical security flaw in the Apache Log4j library. Log4j is a widely used Java-based logging framework that allows developers to log messages from applications to various destinations, such as files, databases, and...

CVE-2022-29806

CVE-2022-29806 ZoneMinder up to 1.36.12 Language privilege escalation and RCE Description A Path Traversal vulnerability in debug log file and default language option in ZoneMinder version before 1.36.13 and 1.37.11 allows attackers to write and execute arbitrary code to achieve remote command...

CVE-2023-21839-metasploit-scanner

CVE-2023-21839-metasploit-scanner Usage git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner cd CVE-2023-21839-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp weblogiciioprce.py /.msf4/modules/auxiliary/scanner/http chmod +x...

S1EM

Objectives Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly...

CVE-2021-21234

CVE-2021-21234 Directory traversal vulnerability in the spring-boot-actuator-logview library https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

Log4j-RCE

Log4j-RCE Log4j RCE - CVE-2021-44228 How To Run? root@kitploit: php log4j.php https://1337.com Requirements PHP CURL PAYLOAD DNS LOG Collaborator Burpsuite or use dnslog.cn List Payload root@kitploit: $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId $docker:containerName...

winevt_logs_analysis

Análisis de registros de Winevt Conexiones remotas Script simple para encontrar conexiones remotas a máquinas Windows e idealmente algunas IPs públicas. Comprueba algunos EventIDs relacionados con inicios de sesión y sesiones remotas. Debes ejecutar pip install -r requirements.txt para que el...