PoCForCVE-2015-1528

Este PoC é dividido em três partes, a pasta mediaserver ajuda a injetar código no mediaserver a partir de uma aplicação normal. a pasta surfaceflinger ajuda a injetar código no surfaceflinger depois de obter permissão do mediaserver. a pasta systemserver ajuda a injetar código no systemserver...

cve-2019-9787_csrf_poc

CVE-2019-9787 CSRF PoC Обзор PoC уязвимости CVE-2019-9787 CSRF Версия WordPress 5.0 ссылка Не используйте это, кроме как для тестирования. Установка root@kitploit: $ docker-compose up -d 1. зайдите на http://localhost:8080/ и установите WordPress. Вам достаточно создать учётную запись...

thinkphp5.XRce

ThinkPHP5.0 скрипт обнаружения уязвимостей Переписан на основе скрипта @tdcoming Введение: Затрагиваемые версии: v5.1.x 5.1.31 v5.0.x= 5.0.23 Использование: 1. pip install -r requirements.txt 2. Создайте файл url.txt в директории скрипта 3. Поместите URL для проверки в этот файл 4. Запустите скри...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.0 5.5.4 - 'widgetphp' Unautorisierte Remote-Codeausführung Interaktive, kommandozeilenähnliche Konsole für CVE-2019-16759 Verwendung: root@kitploit: python3 exploit.py Gib die Seite mit Http/Https ein und erhalte die Shell :p...

ASVS

OWASP Application Security Verification Standard Este trabalho está licenciado sob uma Creative Commons Atribuição-CompartilhaIgual 4.0 Internacional. 🎉🎉🎉 Bem-vindo à Versão 5.0 do ASVS! 🎉🎉🎉 Lançada AO VIVO no palco do Global AppSec EU Barcelona 2025! Introdução O principal objetivo do Projeto...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

Wordpress_cve-2019-9787_defense

Wordpresscve-2019-9787defense Avviso Questo è un progetto di Sijia Zhanghttps://github.com/sijiahi e Bowen Zhouhttps://github.com/KonjakZhou Prerequisiti: 1 Riproduzione dell'attacco: root@kitploit: - Configura e installa Wordpress5.0 su http://localhost/wp-admin/; - Accedi a Wordpress come...

Important Photon OS Security Update - PHSA-2026-5.0-91-0966

Updates of 'gawk' packages of Photon OS have been released...

Photon OS 5.0: Coreutils PHSA-2026-5.0-91-0960

An update of the coreutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Postgresql15 PHSA-2026-5.0-92-0959

An update of the postgresql15 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2026-61504

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0961

Updates of 'dotnet-runtime' packages of Photon OS have been released...

Photon OS 5.0: Bindutils PHSA-2026-5.0-92-0956

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0956. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2026-5.0-92-0959

Updates of 'postgresql15', 'postgresql16' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0958

Updates of 'cassandra' packages of Photon OS have been released...

Photon OS 5.0: Curl PHSA-2026-5.0-90-0951

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0951. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0952

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0952. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Samba PHSA-2026-5.0-92-0948

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0948. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

UBUNTU-CVE-2026-68249

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit 8d144a0eb09537055841af48c9e7c2d4cd48e84d...

CVE-2026-68249 drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit 8d144a0eb09537055841af48c9e7c2d4cd48e84d...