AA Discord Audit

aa-discord-audit Reconciliation audit for Alliance Auth's Discord integration. Compares the actual role assignments in the configured Discord guild against the state expressed in Alliance Auth Groups + State per user and closes the gap through which moderators can hand-assign AA-named roles to...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator bucle infinito pre-autenticación / DoS remoto. Descripción attributeenumerate en src/libradius/radiusmessage.c:247-271 acepta atributos RADIUS cuyo byte length es menor que sizeofrattrt 2. Para length == 0: data-len = next-length - sizeofrattrt...

CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Laboratorio de Vulnerabilidad e Informe de PoC Entorno práctico Laboratorio Vulnerable e informe detallado de análisis y explotación de la cadena de vulnerabilidades Ni8mare en la plataforma n8n — desde Lectura Arbitraria de Archivos...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection Usage root@kitploit: usage: cve-2021-26084confluencerce.py -h --url URL --cmd CMD --shell CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection optional arguments: -h, --help show this help message and exit --url URL, -u URL Target Url --c...

ad-autopwn

AD AutoPwn De Cero Autenticación a Administrador de Dominio — Cadena de Ataque Automatizada a Active Directory Una herramienta de pruebas de penetración completamente automatizada que encadena más de 25 técnicas de ataque para comprometer entornos de Active Directory. Diseñada para evaluaciones d...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE. root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host...

CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127-Cisco SD-WAN Pre-Authentication Remote Code Execution Overview This repository contains a proof-of-concept PoC exploit for CVE-2026-20127 , a critical pre-authentication remote code execution RCE vulnerability affecting Cisco Catalyst SD-WAN Controller formerly vSmart and Cisco...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN pre-auth file reading Reference 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

day10-nextjs-middleware-lab

Día 10 — Laboratorio de omisión de autenticación middleware de Next.js simulación CVE-2025-29927 Importante: Solo laboratorio educativo. Ejecutar localmente en Docker. Inicio rápido: root@kitploit: npm i build from repo root with files above docker build -t day10-nextjs-lab . run docker run --rm ...

CVE-2023-27524

CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is running with an insecure default configuration CVE-2023-27524. The script checks if a Superset server's session cookies are signed with any well-known default Flask SECRETKEYs. The --validate flag can be...

CVE-2023-25136

OpenSSH CVE-2023-25136 Pre-Auth Double Free – Writeup and POC What is OpenSSH? OpenSSH is a popular tool used for secure communication and remote access. It was developed as a free, open-source implementation of the Secure Shell SSH communications protocol and is widely used for various...

weaponized-0604

Weaponized CVE-2019-0604 Automated Exploit Tool to Maximize CVE-2019-0604. Requirement The requirements.txt file should list all Python libraries this tool used, and they'll be installed using root@kitploit: $ pip install -r requirements.txt Manual blind exploit without credential root@kitploit: ...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Run python cve-2022-23131.py https://www.example.com Admin Use the exp to generate signedsession, replace the cookie, then click Sign in with Single Sign-On SAML Default is Admin Act responsibly, you bear the consequences A chance encounter, a...

watchTowr-vs-SysAid-PreAuth-RCE-Chain

PoC de la cadena RCE PreAuth de SysAid PoC para la cadena RCE PreAuth de SysAid CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778 Consulta nuestra entrada de blog para detalles técnicos https://github.com/user-attachments/assets/03245fab-915d-43b6-8e91-f0a18251af49 PoC en acción...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 Una Prueba de Concepto para el encadenamiento de los CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 desarrollada por @watchTowr para lograr Ejecución Remota de Código en Juniper JunOS en productos de las series...

CVE-2024-40711

CVE-2024-40711 Exploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 See our blog post for technical details https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC in Action root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Veeam -c...

JFrog Artifactory Access Blank Join Key Authentication Bypass

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. id: CVE-2026-82329 info: name: JFrog Artifactory Access Blank Join Key Authentication Bypass author: johnk3r,pruv...

ThinVNC 1.0b1 - Authentication Bypass

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a...

Audiobookshelf - Authentication Bypass

Audiobookshelf contains a path traversal caused by improper authentication-exemption check on URL-encoded paths in server/routers/Auth.js, letting unauthenticated attackers read arbitrary files, exploit requires crafted URL with encoded traversal sequences. id: CVE-2026-71209 info: name:...

Redash Setup Configuration - Default Secrets Disclosure

Redash Setup Configuration is vulnerable to default secrets disclosure Insecure Default Initialization of Resource. If an admin sets up Redash versions =10.0 and prior without explicitly specifying the REDASHCOOKIESECRET or REDASHSECRETKEY environment variables, a default value is used for both...