CVE-2017-6640-POC

CVE-2017-6640-POC Prova di concetto per CVE-2017-6640 come estensione Burp Cisco Prime Data Center Network Manager DCNM implementa credenziali statiche. Vedere anche: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 Più specificamente, l'interfaccia We...

fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591 Ein Exploit für die Fortinet-FortiOS-Authentifizierungs-Bypass-Sicherheitslücke Beschreibung Mit diesem Exploit können Sie die Authentifizierung umgehen und Befehle ausführen Verwendung root@kitploit: sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 exp.py...

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979.rb è lo strumento autonomo per sfruttare la CVE-2000-0979 contro il servizio SMB di Windows 95. msf20000979.rb è il modulo Metasploit. Puoi copiarlo in ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ Ulteriore documentazione in arrivo! Avviso...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner von DanSec Ein einfaches, effektives Aufklärungstool zur Identifizierung potenzieller Gefährdung durch die kritische SharePoint-Sicherheitslücke CVE-2025-53770. !Warning Dieses Tool ist ausschließlich für autorisierte Testzwecke bestimmt. Der Autor DanSec übernimmt keinerle...

CVE-2022-1040

CVE-2022-1040 : Sophos XG115w Firewall 17.0.10 MR-10 - Bypass dell'autenticazione Questa vulnerabilità consente a un attaccante di ottenere accesso non autorizzato allo spazio di gestione del firewall bypassando l'autenticazione. ☕️ Live : ....... aggiornato...

CVE-2019-14974-bypass

Questo repository non contiene un README...

RunasCs

RunasCs RunasCs é um utilitário para executar processos específicos com permissões diferentes das fornecidas pelo logon atual do usuário, usando credenciais explícitas. Esta ferramenta é uma versão melhorada e aberta do runas.exe nativo do Windows que resolve algumas limitações: Permite credencia...

CVE-2026-77704

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them change an appointment's status, allowing customers to set arbitrary statuses on appointments they are booked on, including approving their ow...

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

CVE-2026-18234

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the requester, and does not deduct the wallet balance for most payment methods, allowing any authenticated user, including Subscribers, to mark arbitrary orders as paid...

MobileApp-Pentest-Cheatsheet

Folha de Referência para Testes de Penetração em Aplicações Móveis A folha de referência de pentest de aplicativos móveis foi criada para fornecer uma coleção concisa de informações de alto valor sobre tópicos específicos de testes de penetração em aplicações móveis, bem como um checklist, mapead...

SerialKillerBypassGadgetCollection

SerialKiller: Collezione di Bypass Gadget Descrizione Collezione di Bypass Gadget utilizzabili nelle catene di Gadget di deserializzazione JVM per bypassare la deserializzazione difensiva degli "Look-Ahead ObjectInputStreams". Rilasciata come parte del talk RSA 2016 "SerialKiller: Silently Pwning...

vba2clr

TLDR: Solo sperimentando diversi modi per caricare assembly CLR .NET in VBA localmente e remotamente usando AppDomain.ExecuteAssembly o qualsiasi altro metodo utile dopo aver aggirato AccessVBOM l'accesso programmatico al progetto Visual Basic non è attendibile da VBA. vba2clr..vba: Imposta la...

CVE-2024-27198-RCE

Dork per la mappatura del cyberspazio Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" Come usare Sto usando Python3.9. root@kitploit: pip install requests...

CVE-2026-81026

MasterStudy LMS WordPress plugin versions prior to 3.7.40 contain an unauthenticated payment bypass via PayPal IPN (Instant Payment Notification). The plugin fails to verify the amount, receiver, currency, or status of an incoming payment notification before marking the corresponding order as com...

CVE-2026-81026 MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corresponding order completed, allowing unauthenticated users to complete full-price orders and gain access to paid content by...

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin (through 1.0.3 ) fails to perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code. This allows unauthenticated users to obtain a signed meeting join link for any classro...

CVE-2026-77704

The Booking for Appointments and Events Calendar (Amelia) WordPress plugin before 2.4.9 contains a missing capability check that allows authenticated customers to change the status of appointments they are booked on. This includes self-approving bookings left in a pending state and overwriting an...

CVE-2026-77010 HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

CVE-2026-18234

CVE-2026-18234 affects the MStore API WordPress plugin before version 4.21.1 . The vulnerability stems from two flaws in the plugin's wallet payment handling: it does not verify that the targeted order belongs to the requester, and it fails to deduct the wallet balance for most payment methods. T...